Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-34986 (GCVE-0-2026-34986)
Vulnerability from cvelistv5 – Published: 2026-04-06 16:22 – Updated: 2026-07-22 12:08
VLAI
EPSS
VEX
Title
Go JOSE affect by a panic in JWE decryption
Summary
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
124 references
Impacted products
291 products
| Vendor | Product | Version | |
|---|---|---|---|
| go-jose | go-jose |
Affected:
>= 4.0.0, < 4.1.4
Affected: < 3.0.5 |
|
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.2.0-13 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
7:5.8.2-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.144.0-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:165.1-2.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:52.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
2:1.18.1-3.el10_0.1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
6:5.4.0-15.el10_0.1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.144.0-2.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
2:1.39.9-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:134.1-9.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260520103055.afee755d , < *
(rpm)
Unaffected: 8100020260701102925.afee755d , < * (rpm) cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
2:1.41.8-3.el9_7 , < *
(rpm)
Unaffected: 2:1.43.1-1.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
6:5.8.2-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.144.0-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:165.1-2.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:52.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
2:4.4.1-22.el9_2.11 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
2:1.11.4-0.1.el9_2.6 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
1:1.29.7-1.el9_2.5 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:0.144.0-2.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:101.3-4.el9_4.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
2:1.33.15-1.el9_4.1 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
4:4.9.4-20.el9_4.3 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
2:1.14.6-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
5:5.4.0-20.el9_6.3 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.144.0-2.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
2:1.39.9-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
2:1.18.1-5.el9_6.1 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:132.2-8.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Custom Metric Autoscaler 2.19 |
Unaffected:
1780101236 , < *
(rpm)
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9 |
|
| Red Hat | Custom Metric Autoscaler 2.19 |
Unaffected:
1780101226 , < *
(rpm)
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9 |
|
| Red Hat | Custom Metric Autoscaler 2.19 |
Unaffected:
1780101239 , < *
(rpm)
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9 |
|
| Red Hat | Custom Metric Autoscaler 2.19 |
Unaffected:
1779953535 , < *
(rpm)
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9 |
|
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1781192909 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 |
Unaffected:
1782412815 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 |
Unaffected:
1782392961 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1776351169 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1779135478 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.11.0 |
Unaffected:
1778892370 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1778507267 , < *
(rpm)
Unaffected: 1782204403 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8 |
|
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1778507253 , < *
(rpm)
Unaffected: 1782204381 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.6::el8 |
|
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1778476004 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el8 |
|
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1782203505 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el8 |
|
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1778476002 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.7 |
Unaffected:
1777360597 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.7::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1778288655 , < *
(rpm)
Unaffected: 1779910504 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el8 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1778503377 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1778503196 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1778503297 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1778288646 , < *
(rpm)
Unaffected: 1779910129 , < * (rpm) cpe:/a:redhat:multicluster_engine:2.8::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782158798 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
|
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1778464111 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el8 |
|
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1778464072 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
|
| Red Hat | Multicluster Global Hub 1.3.4 |
Unaffected:
1779212259 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.3::el9 |
|
| Red Hat | Multicluster Global Hub 1.4.5 |
Unaffected:
1779579439 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
|
| Red Hat | Multicluster Global Hub 1.5.6 |
Unaffected:
1778867753 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.5::el9 |
|
| Red Hat | Multicluster Global Hub 1.6.2 |
Unaffected:
1780167118 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
|
| Red Hat | OpenShift API for Data Protection 1.4 |
Unaffected:
1779770049 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.4::el9 |
|
| Red Hat | OpenShift API for Data Protection 1.4 |
Unaffected:
1779243793 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.4::el9 |
|
| Red Hat | OpenShift API for Data Protection 1.5 |
Unaffected:
1779770057 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.5::el9 |
|
| Red Hat | OpenShift API for Data Protection 1.5 |
Unaffected:
1779245274 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.5::el9 |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1780204322 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
|
| Red Hat | Red Hat Advanced Cluster Security 4.8 |
Unaffected:
1777307791 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.8::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security 4.8 |
Unaffected:
1776727747 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.8::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1777986630 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
|
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1777976489 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
|
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783953372 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
|
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1780069381 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1778696221 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1778578758 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1778711679 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1782185551 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1778152595 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1781612340 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1779253452 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1781528081 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1778139790 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779775173 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779776767 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779777382 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779778558 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779775521 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1779776141 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1780992173 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1780991067 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1781095245 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.20 |
Unaffected:
1781196942 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1778004922 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779258037 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779264135 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779263963 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779256521 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779260263 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779265022 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1779775977 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1780402732 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1780402633 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1780984236 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1781023907 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1781129269 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1781010151 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1780943933 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.22 |
Unaffected:
1782879990 , < *
(rpm)
cpe:/a:redhat:openshift:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049594 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049298 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049745 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049753 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050558 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049818 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049878 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049920 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778049945 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778060364 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050037 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050035 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050048 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050508 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050119 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050290 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778059723 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050352 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.17 |
Unaffected:
1778050482 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.17::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045210 , < *
(rpm)
Unaffected: 1783676191 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778044961 , < *
(rpm)
Unaffected: 1783929816 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045359 , < *
(rpm)
Unaffected: 1784094353 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045374 , < *
(rpm)
Unaffected: 1784093953 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045891 , < *
(rpm)
Unaffected: 1784094943 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045472 , < *
(rpm)
Unaffected: 1783676585 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045534 , < *
(rpm)
Unaffected: 1783676649 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045524 , < *
(rpm)
Unaffected: 1783676675 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045587 , < *
(rpm)
Unaffected: 1784094299 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778046067 , < *
(rpm)
Unaffected: 1784094725 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045627 , < *
(rpm)
Unaffected: 1783676820 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045731 , < *
(rpm)
Unaffected: 1783676883 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045700 , < *
(rpm)
Unaffected: 1783676894 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778046234 , < *
(rpm)
Unaffected: 1784095175 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045792 , < *
(rpm)
Unaffected: 1783676977 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045858 , < *
(rpm)
Unaffected: 1784093503 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045945 , < *
(rpm)
Unaffected: 1783677297 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778045931 , < *
(rpm)
Unaffected: 1783677345 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.18 |
Unaffected:
1778046079 , < *
(rpm)
Unaffected: 1783677533 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.18::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776079019 , < *
(rpm)
Unaffected: 1783684360 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776706744 , < *
(rpm)
Unaffected: 1783684068 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707205 , < *
(rpm)
Unaffected: 1784054582 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707231 , < *
(rpm)
Unaffected: 1784054606 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707760 , < *
(rpm)
Unaffected: 1784055295 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707301 , < *
(rpm)
Unaffected: 1783684603 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776079295 , < *
(rpm)
Unaffected: 1783684668 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707362 , < *
(rpm)
Unaffected: 1783684667 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707418 , < *
(rpm)
Unaffected: 1784054873 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707377 , < *
(rpm)
Unaffected: 1783684707 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707947 , < *
(rpm)
Unaffected: 1784055589 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707456 , < *
(rpm)
Unaffected: 1783684779 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707526 , < *
(rpm)
Unaffected: 1783684831 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707526 , < *
(rpm)
Unaffected: 1783684839 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707945 , < *
(rpm)
Unaffected: 1784055533 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707569 , < *
(rpm)
Unaffected: 1784055558 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707724 , < *
(rpm)
Unaffected: 1784056134 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707763 , < *
(rpm)
Unaffected: 1783685128 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776707771 , < *
(rpm)
Unaffected: 1783685129 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.19 |
Unaffected:
1776079774 , < *
(rpm)
Unaffected: 1783685375 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.19::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1775822432 , < *
(rpm)
Unaffected: 1783667125 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776403457 , < *
(rpm)
Unaffected: 1783666755 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776403991 , < *
(rpm)
Unaffected: 1784054598 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404009 , < *
(rpm)
Unaffected: 1784055387 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404539 , < *
(rpm)
Unaffected: 1784055726 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404060 , < *
(rpm)
Unaffected: 1783667517 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1775822689 , < *
(rpm)
Unaffected: 1783667577 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776404131 , < *
(rpm)
Unaffected: 1783667611 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406225 , < *
(rpm)
Unaffected: 1784055020 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406131 , < *
(rpm)
Unaffected: 1783667641 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406770 , < *
(rpm)
Unaffected: 1784055586 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406247 , < *
(rpm)
Unaffected: 1783667790 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406286 , < *
(rpm)
Unaffected: 1783667859 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406291 , < *
(rpm)
Unaffected: 1783667875 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406284 , < *
(rpm)
Unaffected: 1783667869 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406291 , < *
(rpm)
Unaffected: 1783667877 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406771 , < *
(rpm)
Unaffected: 1784055576 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406384 , < *
(rpm)
Unaffected: 1784055244 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406540 , < *
(rpm)
Unaffected: 1784055382 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406595 , < *
(rpm)
Unaffected: 1783668266 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1776406594 , < *
(rpm)
Unaffected: 1783668288 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.2 |
Unaffected:
1775823207 , < *
(rpm)
Unaffected: 1783669219 , < * (rpm) cpe:/a:redhat:openshift_data_foundation:4.20::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932114 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782931768 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932104 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783536000 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783535989 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783536515 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932521 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783018461 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783018421 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932812 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537001 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932919 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537586 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932969 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933015 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933042 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537392 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933235 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933251 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537955 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933417 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537742 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933602 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783019377 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934054 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934036 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934284 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.27 |
Unaffected:
1776718585 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.27::el9 |
|
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782987430 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3.9.1 |
Unaffected:
1776435643 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3.9.1 |
Unaffected:
1776435613 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3.9.1 |
Unaffected:
1776435680 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
|
| Red Hat | Red Hat OpenShift distributed tracing 3.9.1 |
Unaffected:
1776185379 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.9::el9 |
|
| Red Hat | Red Hat OpenShift GitOps 1.18 |
Unaffected:
1779116359 , < *
(rpm)
cpe:/a:redhat:openshift_gitops:1.18::el8 |
|
| Red Hat | Red Hat OpenShift Pipelines 1.2 |
Unaffected:
1779865001 , < *
(rpm)
cpe:/a:redhat:openshift_pipelines:1.20::el9 |
|
| Red Hat | Red Hat OpenShift Pipelines 1.2 |
Unaffected:
1780044955 , < *
(rpm)
cpe:/a:redhat:openshift_pipelines:1.20::el9 |
|
| Red Hat | Red Hat OpenShift Pipelines 1.21 |
Unaffected:
cli-1.21.1 , < *
(rpm)
cpe:/a:redhat:openshift_pipelines:1.21::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1777374598 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 2.6 |
Unaffected:
1777319850 , < *
(rpm)
cpe:/a:redhat:service_mesh:2.6::el8 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1776151270 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1776238635 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1776256858 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1776149682 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1776178280 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1776178059 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
|
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1776151277 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
|
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1776736910 , < *
(rpm)
Unaffected: 1779822261 , < * (rpm) cpe:/a:redhat:quay:3.10::el8 |
|
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1776752646 , < *
(rpm)
Unaffected: 1779811412 , < * (rpm) cpe:/a:redhat:quay:3.12::el8 |
|
| Red Hat | Red Hat Quay 3.14 |
Unaffected:
1779689392 , < *
(rpm)
cpe:/a:redhat:quay:3.14::el8 |
|
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1780891395 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
|
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1779204086 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.17 |
Unaffected:
1779922205 , < *
(rpm)
cpe:/a:redhat:quay:3.17::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1776782369 , < *
(rpm)
Unaffected: 1779811473 , < * (rpm) cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1776339099 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1776329867 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780386299 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780053572 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780046753 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780046765 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780049214 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780051354 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.3 |
Unaffected:
1780052587 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.3::el9 |
|
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2 |
|
| Red Hat | cert-manager Operator for Red Hat OpenShift |
cpe:/a:redhat:cert_manager:1 |
|
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1 |
|
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1 |
|
| Red Hat | Kernel Module Management Operator for Red Hat Openshift |
cpe:/a:redhat:kernel_module_management:2 |
|
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:5 |
|
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4 |
|
| Red Hat | Migration Toolkit for Containers |
cpe:/a:redhat:rhmt:1 |
|
| Red Hat | Migration Toolkit for Virtualization |
cpe:/a:redhat:migration_toolkit_virtualization:2 |
|
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine |
|
| Red Hat | Multicluster Global Hub |
cpe:/a:redhat:multicluster_globalhub |
|
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1 |
|
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0 |
|
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1 |
|
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1 |
|
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2 |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2 |
|
| Red Hat | Red Hat Advanced Cluster Security 4 |
cpe:/a:redhat:advanced_cluster_security:4 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat Build of Kueue |
cpe:/a:redhat:kueue_operator:1 |
|
| Red Hat | Red Hat Build of Podman Desktop |
cpe:/a:redhat:podman_desktop:1 |
|
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview |
cpe:/a:redhat:podman_desktop:0 |
|
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1 |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4 |
|
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3 |
|
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config |
|
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1 |
|
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1 |
|
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4 |
|
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0 |
|
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3 |
|
| Red Hat | Red Hat Trusted Artifact Signer |
cpe:/a:redhat:trusted_artifact_signer:1 |
|
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1 |
|
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1 |
|
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-34986",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-07T14:21:42.477191Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-07T14:21:54.041Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-13",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7:5.8.2-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:165.1-2.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:52.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.18.1-3.el10_0.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "6:5.4.0-15.el10_0.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.39.9-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:134.1-9.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "container-tools:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260520103055.afee755d",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260701102925.afee755d",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.41.8-3.el9_7",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.43.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "6:5.8.2-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:165.1-2.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:52.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:4.4.1-22.el9_2.11",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.11.4-0.1.el9_2.6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.29.7-1.el9_2.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:101.3-4.el9_4.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.33.15-1.el9_4.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4:4.9.4-20.el9_4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.14.6-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "5:5.4.0-20.el9_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.144.0-2.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.39.9-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.18.1-5.el9_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:132.2-8.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780101236",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780101226",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780101239",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9"
],
"defaultStatus": "affected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator",
"product": "Custom Metric Autoscaler 2.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779953535",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781192909",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/cluster-logging-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782412815",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782392961",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-agent-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776351169",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779135478",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.11.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778892370",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-controller-rhel8",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778507267",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1782204403",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-rhel8",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778507253",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1782204381",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778476004",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-agent-rhel8",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782203505",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778476002",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-agent-rhel9",
"product": "multicluster engine for Kubernetes 2.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777360597",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778288655",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779910504",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-agent-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778503377",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778503196",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-installer-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778503297",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778288646",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779910129",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/must-gather-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782158798",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el8"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778464111",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778464072",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Multicluster Global Hub 1.3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779212259",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Multicluster Global Hub 1.4.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779579439",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Multicluster Global Hub 1.5.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778867753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
"product": "Multicluster Global Hub 1.6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780167118",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-mustgather-rhel9",
"product": "OpenShift API for Data Protection 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779770049",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-plugin-rhel9",
"product": "OpenShift API for Data Protection 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779243793",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-mustgather-rhel9",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779770057",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-plugin-rhel9",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779245274",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/submariner-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780204322",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777307791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777307791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776727747",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-slim-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776727747",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.8::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"product": "Red Hat Advanced Cluster Security 4.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777307791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777986630",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777976489",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-controller-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783953372",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780069381",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kube-auth-proxy-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778696221",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778578758",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778711679",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-oauth-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782185551",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778152595",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-oauth-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781612340",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779253452",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-oauth-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781528081",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778139790",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cli-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779775173",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-olm-catalogd-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779776767",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-olm-operator-controller-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779777382",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-framework-tools-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779778558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779775521",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-registry-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779776141",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cloud-credential-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780992173",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-kube-state-metrics-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780991067",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-machine-config-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781095245",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.20",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781196942",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-telemeter-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778004922",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-machine-config-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779258037",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-olm-catalogd-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779264135",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-olm-operator-controller-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779263963",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-framework-tools-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779256521",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-lifecycle-manager-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779260263",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-operator-registry-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779265022",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cli-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779775977",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cloud-credential-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780402732",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-kube-state-metrics-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780402633",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/oc-mirror-plugin-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780984236",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-oauth-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781023907",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-installer-artifacts-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781129269",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-installer-artifacts-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781010151",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-oauth-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780943933",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-node-agent-rhel9",
"product": "Red Hat OpenShift Container Platform 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782879990",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049594",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049298",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049745",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049818",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049878",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049920",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778049945",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778060364",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050037",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050035",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050048",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050119",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050290",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778059723",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050352",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778050482",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045210",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676191",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778044961",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783929816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045359",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094353",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045374",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093953",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045891",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094943",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045472",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045534",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676649",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045524",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676675",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045587",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094299",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778046067",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784094725",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045627",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676820",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045731",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676883",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045700",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676894",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778046234",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784095175",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045792",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783676977",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045858",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784093503",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045945",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677297",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778045931",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677345",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778046079",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783677533",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776079019",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684360",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776706744",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684068",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707205",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054582",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707231",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054606",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707760",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055295",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707301",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684603",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776079295",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684668",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707362",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684667",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707418",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054873",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707377",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684707",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707947",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707456",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684779",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707526",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684831",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707526",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783684839",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707945",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055533",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707569",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055558",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707724",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784056134",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707763",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685128",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776707771",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685129",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776079774",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783685375",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775822432",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667125",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776403457",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783666755",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776403991",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784054598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404009",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055387",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404539",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055726",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404060",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667517",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775822689",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667577",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776404131",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667611",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406225",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055020",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406131",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667641",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406770",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055586",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406247",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667790",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406286",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667859",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406291",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667875",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406284",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667869",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406291",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783667877",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406771",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055576",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406384",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055244",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406540",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784055382",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406595",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668266",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776406594",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783668288",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775823207",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1783669219",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782931768",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/devicefinder-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932104",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783536000",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783535989",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783536515",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932521",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783018461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783018421",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-blackbox-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537001",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932919",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537586",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932969",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933015",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933042",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-drbd-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537392",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933235",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933251",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537955",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933417",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537742",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933602",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783019377",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-volsync-plugin-mover-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934054",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-volsync-plugin-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934284",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.27::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/traefik-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.27",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776718585",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-base-rhel10",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782987430",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-gateway-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776435643",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-query-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776435613",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776435680",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-collector-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.9.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776185379",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1.18::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps 1.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779116359",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9",
"product": "Red Hat OpenShift Pipelines 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779865001",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-operator-bundle",
"product": "Red Hat OpenShift Pipelines 1.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780044955",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1.21::el9"
],
"defaultStatus": "affected",
"packageName": "serve-tkn-cli-1-21-serve-tkn",
"product": "Red Hat OpenShift Pipelines 1.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "cli-1.21.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777374598",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:2.6::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/pilot-rhel8",
"product": "Red Hat OpenShift Service Mesh 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777319850",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151270",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776238635",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776256858",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776149682",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776178280",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776178059",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776151277",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776736910",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779822261",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776752646",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779811412",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.14::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779689392",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780891395",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779204086",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.17::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779922205",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776782369",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1779811473",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/client-server-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776339099",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/cosign-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776329867",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rhtas-console-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780386299",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/createtree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780053572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-monitor-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780046753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/fulcio-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780046765",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-backfill-redis-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780049214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-server-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780049214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/timestamp-authority-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780051354",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-database-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780053572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logserver-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780053572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/trillian-logsigner-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780053572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/fetch-tsa-certs-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780051354",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/gitsign-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780052587",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/rekor-cli-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780049214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/updatetree-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780053572",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "assisted/agent-preinstall-image-builder-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-controller-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/cert-manager-istio-csr-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/cert-manager-operator-bundle",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/cert-manager-operator-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cert_manager:1"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "cert-manager Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-must-gather-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "external-secrets-operator/bitwarden-sdk-server-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "external-secrets-operator/external-secrets-operator-bundle",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "external-secrets-operator/external-secrets-operator-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:kernel_module_management:2"
],
"defaultStatus": "affected",
"packageName": "kmm/kernel-module-management-must-gather-rhel9",
"product": "Kernel Module Management Operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/cluster-logging-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/loki-operator-bundle",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/loki-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/lokistack-gateway-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:5"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/opa-openshift-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-must-gather-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-log-reader-rhel8",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-must-gather-rhel8",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2"
],
"defaultStatus": "affected",
"packageName": "migration-toolkit-virtualization/mtv-must-gather-rhel8",
"product": "Migration Toolkit for Virtualization",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2"
],
"defaultStatus": "affected",
"packageName": "mtv-candidate/mtv-must-gather-rhel8",
"product": "Migration Toolkit for Virtualization",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-api-provider-aws-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/hive-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-rhel9-operator",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/image-based-install-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unaffected",
"packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9",
"product": "Multicluster Global Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "unaffected",
"packageName": "workload-availability/node-healthcheck-must-gather-rhel9",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-agent-base-rhel9",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-rhel8",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "ocp-tools-4/jenkins-rhel9",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-jenkins",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "unaffected",
"packageName": "openshift-lightspeed/openshift-mcp-server-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-cache-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-chains-controller-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-cli-tkn-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-controller-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-opc-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-results-api-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-results-watcher-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-rhel9-operator",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-sidecarlogresults-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-ekb-dispatcher-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-ekb-kafka-controller-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-ekb-receiver-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-apiserver-receive-adapter-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-channel-controller-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-channel-dispatcher-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-controller-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-filter-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-ingress-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-jobsink-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-mtchannel-broker-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-mtping-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-eventing-webhook-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/serverless-must-gather-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-must-gather-rhel9",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/proxyv2-rhel9",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-must-gather-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-operator-bundle",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "unaffected",
"packageName": "openshift-power-monitoring/power-monitoring-rhel9-operator",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-grafana-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-multicluster-observability-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-must-gather-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/kube-rbac-proxy-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/kube-state-metrics-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/submariner-operator-bundle",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"packageName": "advanced-cluster-security/rhacs-rhel8-operator",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/aap-must-gather-rhel8",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/aap-must-gather-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-on-clouds/aoc-azure-aap-installer-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:kueue_operator:1"
],
"defaultStatus": "unaffected",
"packageName": "kueue/kueue-must-gather-rhel9",
"product": "Red Hat Build of Kueue",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "affected",
"packageName": "podman-desktop-macos-1-0",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:1"
],
"defaultStatus": "affected",
"packageName": "podman-desktop-windows-1-0",
"product": "Red Hat Build of Podman Desktop",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-bootc-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:podman_desktop:0"
],
"defaultStatus": "affected",
"packageName": "rhdesktop/rh-podman-desktop-ext-rhel-rhel10",
"product": "Red Hat Build of Podman Desktop - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/authorino-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-maas-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-must-gather-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/lvms-must-gather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/cnf-tests-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/cnf-tests-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/kube-compare-artifacts-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/lifecycle-agent-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/network-tools-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/numaresources-must-gather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-api-server-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-agent-installer-csr-approver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-aws-cluster-api-controllers-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-aws-pod-identity-webhook-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-azure-workload-identity-webhook-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-baremetal-installer-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cli-artifacts-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-csi-driver-shared-resource-mustgather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-deployer-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-docker-builder",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-docker-builder-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-helm-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-installer-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-local-storage-mustgather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-machine-os-images-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-must-gather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ovn-kubernetes-microshift-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ovn-kubernetes-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-secrets-store-csi-mustgather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-tests-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-tools-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ptp-must-gather-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift-kni/commatrix",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "redhat/redhat-operator-index",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/oauth2-proxy-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "unaffected",
"packageName": "devspaces/udi-base-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-operator-bundle",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-agent-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/must-gather-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-apiserver-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-cloner-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-controller-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-importer-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-operator-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-uploadproxy-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-cdi-uploadserver-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/openstack-operator-bundle",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/openstack-rhel9-operator",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/prometheus-podman-exporter-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/clair-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/clair-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-builder-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-builder-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "unaffected",
"packageName": "rhtas/certificate-transparency-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/ec-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "unaffected",
"packageName": "rhtas/model-transparency-cli-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/policy-controller-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/policy-controller-rhel9-operator",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-security-profiles-operator-bundle",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-security-profiles-rhel8-operator",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-controller-manager-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "unaffected",
"packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-server-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-04-06T16:22:45.353Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "Incorrect Calculation of Buffer Size",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:08:46.893Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"name": "RHBZ#2455470",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17789"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20569"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19719"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27856"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17040"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16696"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22937"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22450"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19017"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33722"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35833"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25252"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25248"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25250"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34192"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:32991"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34196"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34197"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19721"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20607"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19720"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26054"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20609"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19186"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23228"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19353"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22714"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19173"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26636"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34364"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26585"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22423"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22347"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21769"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23345"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29854"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25127"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13791"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13829"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24977"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34099"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17598"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27001"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17448"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27004"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20041"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27063"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17468"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25187"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21709"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23241"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27044"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20034"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17474"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34794"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25206"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24484"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21932"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21931"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11688"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9448"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8490"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9453"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8491"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8493"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9388"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9385"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17550"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41941"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17547"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41944"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12279"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37387"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12277"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40984"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11856"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22629"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21017"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24853"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22465"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11916"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22840"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23361"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11996"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10130"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24475"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24482"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24479"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24477"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24471"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19108"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12116"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19099"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28198"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17459"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17458"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11512"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17123"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22258"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17121"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22260"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18584"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:18585"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:17789: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:27856: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:17040: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:16696: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19017: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:35833: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:25252: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:25248: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:25250: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:32991: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:26054: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:10135: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19186: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19173: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26636: Custom Metric Autoscaler 2.19"
},
{
"lang": "en",
"value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:26585: Logging for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:22423: Multicluster Global Hub 1.3.4"
},
{
"lang": "en",
"value": "RHSA-2026:22347: Multicluster Global Hub 1.4.5"
},
{
"lang": "en",
"value": "RHSA-2026:21769: Multicluster Global Hub 1.5.6"
},
{
"lang": "en",
"value": "RHSA-2026:23345: Multicluster Global Hub 1.6.2"
},
{
"lang": "en",
"value": "RHSA-2026:29854: OpenShift API for Data Protection 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:26568: OpenShift API for Data Protection 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8"
},
{
"lang": "en",
"value": "RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8"
},
{
"lang": "en",
"value": "RHSA-2026:13791: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:24977: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:34099: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:27001: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:17448: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:27004: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:21703: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:25194: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20"
},
{
"lang": "en",
"value": "RHSA-2026:25187: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:21709: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:23241: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:34794: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:25206: Red Hat OpenShift Container Platform 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27"
},
{
"lang": "en",
"value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
},
{
"lang": "en",
"value": "RHSA-2026:20946: Red Hat OpenShift GitOps 1.18"
},
{
"lang": "en",
"value": "RHSA-2026:24484: Red Hat OpenShift Pipelines 1.21"
},
{
"lang": "en",
"value": "RHSA-2026:21932: Red Hat OpenShift Pipelines 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:21931: Red Hat OpenShift Pipelines 1.2"
},
{
"lang": "en",
"value": "RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:9448: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:9453: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:9388: Red Hat OpenShift distributed tracing 3.9.1"
},
{
"lang": "en",
"value": "RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.1"
},
{
"lang": "en",
"value": "RHSA-2026:17550: Red Hat Openshift Data Foundation 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:17547: Red Hat Openshift Data Foundation 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:12279: Red Hat Openshift Data Foundation 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:12277: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:11856: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:22629: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:21017: Red Hat Quay 3.14"
},
{
"lang": "en",
"value": "RHSA-2026:24853: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:19375: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:22465: Red Hat Quay 3.17"
},
{
"lang": "en",
"value": "RHSA-2026:11916: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:22840: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:23361: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:11996: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:10125: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:10130: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24475: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24482: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24479: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24477: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:24471: Red Hat Trusted Artifact Signer 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:19108: multicluster engine for Kubernetes 2.11.0"
},
{
"lang": "en",
"value": "RHSA-2026:12116: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:19099: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:28198: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:17459: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:17458: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:11512: multicluster engine for Kubernetes 2.7"
},
{
"lang": "en",
"value": "RHSA-2026:17123: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:22258: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:17121: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:22260: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:18584: multicluster engine for Kubernetes 2.9"
},
{
"lang": "en",
"value": "RHSA-2026:18585: multicluster engine for Kubernetes 2.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-04-06T17:01:34.639Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-04-06T16:22:45.353Z",
"value": "Made public."
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "go-jose",
"vendor": "go-jose",
"versions": [
{
"status": "affected",
"version": "\u003e= 4.0.0, \u003c 4.1.4"
},
{
"status": "affected",
"version": "\u003c 3.0.5"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-248",
"description": "CWE-248: Uncaught Exception",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-06T16:22:45.353Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"name": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"tags": [
"x_refsource_MISC"
],
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"source": {
"advisory": "GHSA-78h2-9frx-2jm8",
"discovery": "UNKNOWN"
},
"title": "Go JOSE affect by a panic in JWE decryption"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-34986",
"datePublished": "2026-04-06T16:22:45.353Z",
"dateReserved": "2026-03-31T19:38:31.617Z",
"dateUpdated": "2026-07-22T12:08:46.893Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-34986",
"date": "2026-07-22",
"epss": "0.00651",
"percentile": "0.47393"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-34986\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-04-06T17:17:11.870\",\"lastModified\":\"2026-07-22T12:17:37.760\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"go-jose\",\"product\":\"go-jose\",\"versions\":[{\"version\":\"\u003e= 4.0.0, \u003c 4.1.4\",\"status\":\"affected\"},{\"version\":\"\u003c 3.0.5\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-13\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"7:5.8.2-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.144.0-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:165.1-2.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:52.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"2:1.18.1-3.el10_0.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"6:5.4.0-15.el10_0.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.144.0-2.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"2:1.39.9-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:134.1-9.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260520103055.afee755d\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"8100020260701102925.afee755d\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"2:1.41.8-3.el9_7\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"2:1.43.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"6:5.8.2-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:165.1-2.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:52.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"2:4.4.1-22.el9_2.11\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"2:1.11.4-0.1.el9_2.6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"1:1.29.7-1.el9_2.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:101.3-4.el9_4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"2:1.33.15-1.el9_4.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"4:4.9.4-20.el9_4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"2:1.14.6-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"5:5.4.0-20.el9_6.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.144.0-2.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"2:1.39.9-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"2:1.18.1-5.el9_6.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:132.2-8.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"],\"versions\":[{\"version\":\"1780101236\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"],\"versions\":[{\"version\":\"1780101226\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"],\"versions\":[{\"version\":\"1780101239\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler 2.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"],\"versions\":[{\"version\":\"1779953535\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/lokistack-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1781192909\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/cluster-logging-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1782412815\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/lokistack-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1782392961\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1776351169\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1779135478\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1778892370\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"],\"versions\":[{\"version\":\"1778507267\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1782204403\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"],\"versions\":[{\"version\":\"1778507253\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1782204381\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"],\"versions\":[{\"version\":\"1778476004\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-agent-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el8\"],\"versions\":[{\"version\":\"1782203505\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1778476002\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.7::el9\"],\"versions\":[{\"version\":\"1777360597\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el8\"],\"versions\":[{\"version\":\"1778288655\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779910504\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1778503377\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1778503196\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1778503297\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1778288646\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779910129\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782158798\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el8\"],\"versions\":[{\"version\":\"1778464111\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1778464072\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.3::el9\"],\"versions\":[{\"version\":\"1779212259\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.4.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1779579439\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.5.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"],\"versions\":[{\"version\":\"1778867753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1780167118\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"],\"versions\":[{\"version\":\"1779770049\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"],\"versions\":[{\"version\":\"1779243793\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"],\"versions\":[{\"version\":\"1779770057\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"],\"versions\":[{\"version\":\"1779245274\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/submariner-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1780204322\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1777307791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-roxctl-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1777307791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1776727747\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-slim-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1776727747\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-v4-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"],\"versions\":[{\"version\":\"1777307791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-roxctl-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-scanner-v4-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1777986630\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1777976489\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783953372\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1780069381\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-kube-auth-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778696221\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778578758\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1778711679\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-oauth-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1782185551\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1778152595\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-oauth-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1781612340\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1779253452\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-oauth-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1781528081\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1778139790\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779775173\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-olm-catalogd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779776767\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-olm-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779777382\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-framework-tools-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779778558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-lifecycle-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779775521\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1779776141\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cloud-credential-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1780992173\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-kube-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1780991067\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1781095245\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.20\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/oc-mirror-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1781196942\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-telemeter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1778004922\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779258037\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-olm-catalogd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779264135\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-olm-operator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779263963\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-framework-tools-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779256521\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-lifecycle-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779260263\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-operator-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779265022\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1779775977\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cloud-credential-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1780402732\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-kube-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1780402633\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/oc-mirror-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1780984236\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-oauth-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1781023907\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-installer-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1781129269\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-installer-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1781010151\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-oauth-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1780943933\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-agent-installer-node-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.22::el9\"],\"versions\":[{\"version\":\"1782879990\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049594\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049298\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049745\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049818\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049878\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049920\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778049945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778060364\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050037\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050035\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050048\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050119\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050290\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778059723\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050352\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"],\"versions\":[{\"version\":\"1778050482\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045210\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676191\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778044961\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783929816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045359\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094353\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045374\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784093953\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045891\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094943\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045472\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045534\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676649\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045524\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676675\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045587\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094299\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778046067\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784094725\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045627\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676820\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045731\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676883\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045700\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676894\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778046234\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784095175\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783676977\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045858\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784093503\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783677297\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778045931\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783677345\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"],\"versions\":[{\"version\":\"1778046079\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783677533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776079019\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684360\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776706744\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684068\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707205\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054582\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707231\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054606\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707760\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055295\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707301\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684603\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776079295\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684668\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707362\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684667\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707418\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054873\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707377\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684707\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707947\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707456\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684779\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707526\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684831\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707526\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783684839\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055533\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707569\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055558\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707724\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784056134\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707763\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783685128\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776707771\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783685129\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"],\"versions\":[{\"version\":\"1776079774\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783685375\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1775822432\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667125\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776403457\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783666755\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776403991\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784054598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404009\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055387\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404539\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055726\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404060\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667517\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1775822689\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667577\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776404131\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667611\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406225\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055020\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406131\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667641\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406770\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406247\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667790\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406286\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667859\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406291\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667875\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667869\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406291\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783667877\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406771\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055576\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406384\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055244\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406540\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784055382\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406595\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783668266\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1776406594\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783668288\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"],\"versions\":[{\"version\":\"1775823207\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1783669219\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782931768\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/devicefinder-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932104\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783536000\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783535989\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783536515\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932521\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783018461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783018421\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-blackbox-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537001\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932919\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932969\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933015\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933042\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-drbd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537392\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933235\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933251\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537955\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933417\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537742\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933602\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783019377\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-volsync-plugin-mover-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934054\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-volsync-plugin-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.27\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/traefik-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"],\"versions\":[{\"version\":\"1776718585\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/udi-base-rhel10\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782987430\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776435643\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-query-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776435613\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776435680\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.9.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"],\"versions\":[{\"version\":\"1776185379\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps 1.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1.18::el8\"],\"versions\":[{\"version\":\"1779116359\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Pipelines 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"],\"versions\":[{\"version\":\"1779865001\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Pipelines 1.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-pipelines/pipelines-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"],\"versions\":[{\"version\":\"1780044955\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Pipelines 1.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"serve-tkn-cli-1-21-serve-tkn\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1.21::el9\"],\"versions\":[{\"version\":\"cli-1.21.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1777374598\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/pilot-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2.6::el8\"],\"versions\":[{\"version\":\"1777319850\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1776151270\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1776238635\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1776256858\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1776149682\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1776178280\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1776178059\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1776151277\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1776736910\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779822261\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1776752646\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779811412\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.14::el8\"],\"versions\":[{\"version\":\"1779689392\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1780891395\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1779204086\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.17::el9\"],\"versions\":[{\"version\":\"1779922205\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1776782369\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1779811473\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/client-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1776339099\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/cosign-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1776329867\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rhtas-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780386299\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/createtree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780053572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780046753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/fulcio-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780046765\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-backfill-redis-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780049214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780049214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/timestamp-authority-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780051354\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-database-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780053572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780053572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/trillian-logsigner-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780053572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/fetch-tsa-certs-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780051354\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/gitsign-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780052587\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/rekor-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780049214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/updatetree-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"],\"versions\":[{\"version\":\"1780053572\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"assisted/agent-preinstall-image-builder-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/cert-manager-istio-csr-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/cert-manager-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/cert-manager-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-acmesolver-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"cert-manager Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/bitwarden-sdk-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Kernel Module Management Operator for Red Hat Openshift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kmm/kernel-module-management-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:kernel_module_management:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/cluster-logging-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/loki-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/loki-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/lokistack-gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/opa-openshift-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-log-reader-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"migration-toolkit-virtualization/mtv-must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mtv-candidate/mtv-must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-api-provider-aws-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hive-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hypershift-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/image-based-install-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/kube-rbac-proxy-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-agent-base-rhel9\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-rhel8\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocp-tools-4/jenkins-rhel9\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-jenkins\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/openshift-mcp-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-cache-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-chains-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-cli-tkn-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-opc-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-results-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-results-watcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-sidecarlogresults-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-ekb-dispatcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-ekb-kafka-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-ekb-receiver-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-apiserver-receive-adapter-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-channel-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-channel-dispatcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-filter-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-ingress-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-jobsink-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-mtchannel-broker-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-mtping-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-eventing-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/serverless-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/power-monitoring-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-multicluster-observability-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/kube-rbac-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/kube-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/submariner-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-25/aap-must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/aap-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-on-clouds/aoc-azure-aap-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Kueue\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kueue/kueue-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:kueue_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman-desktop-macos-1-0\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman-desktop-windows-1-0\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-bootc-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Build of Podman Desktop - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhdesktop/rh-podman-desktop-ext-rhel-rhel10\",\"cpes\":[\"cpe:/a:redhat:podman_desktop:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/authorino-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10-eus/rhel-10.0-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9-eus/rhel-9.6-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-api-server-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-launcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/cnf-tests-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/cnf-tests-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/kube-compare-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/lifecycle-agent-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/network-tools-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/numaresources-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-api-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-csr-approver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-agent-installer-orchestrator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-aws-cluster-api-controllers-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-aws-pod-identity-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-azure-workload-identity-webhook-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-baremetal-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cli-artifacts-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-csi-driver-shared-resource-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-deployer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-docker-builder\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-docker-builder-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-helm-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-local-storage-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-machine-os-images-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ovn-kubernetes-microshift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ovn-kubernetes-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-secrets-store-csi-mustgather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-tests-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-tools-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ptp-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-kni/commatrix\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat/redhat-operator-index\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/mcg-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/oauth2-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/udi-base-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-agent-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/must-gather-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-apiserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-cloner-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-importer-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-uploadproxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-cdi-uploadserver-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/openstack-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/openstack-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/prometheus-podman-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/clair-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/clair-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-builder-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-builder-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/certificate-transparency-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/ec-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/model-transparency-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/policy-controller-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-security-profiles-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-security-profiles-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-controller-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-07T14:21:42.477191Z\",\"id\":\"CVE-2026-34986\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-248\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-131\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:go-jose_project:go-jose:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.0.0\",\"versionEndExcluding\":\"3.0.5\",\"matchCriteriaId\":\"C8F16FC9-40BA-4C17-9ABD-614143E86BFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:go-jose_project:go-jose:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.0.0\",\"versionEndExcluding\":\"4.1.4\",\"matchCriteriaId\":\"DC2FEC8C-1ECF-40EA-A074-86B4C7688B60\"}]}]}],\"references\":[{\"url\":\"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Product\",\"Technical Description\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10125\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10130\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10175\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11070\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11217\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11512\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11688\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11856\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11916\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11996\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12116\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12277\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12279\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13791\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13829\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16696\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17040\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17121\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17123\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17448\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17458\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17459\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17468\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17474\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17547\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17550\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17598\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17789\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18584\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:18585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19017\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19099\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19108\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19173\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19186\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19353\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19375\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19719\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19720\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19721\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20034\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20041\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20569\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20607\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20609\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21017\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21709\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21769\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21931\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21932\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22258\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22260\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22347\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22423\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22450\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22465\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22629\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22714\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22840\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22937\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23228\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23241\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23345\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23361\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24471\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24475\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24477\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24479\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24482\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24484\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24853\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24977\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25127\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25187\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25206\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25248\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25250\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25252\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26054\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26585\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26636\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27001\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27004\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27044\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27063\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27856\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28198\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29854\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30650\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:32991\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33722\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34099\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34192\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34196\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34364\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34794\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35833\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36820\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37387\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40984\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41941\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41944\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8490\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8491\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8493\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9385\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9388\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9448\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9453\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-34986\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2455470\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-23T08:43:13+00:00",
"cve": "CVE-2026-34986",
"id": "CVE-2026-34986",
"initial_release_date": "2026-04-06T16:22:45.353000+00:00",
"product_status:fixed": "2123",
"product_status:known_affected": "169",
"product_status:known_not_affected": "10893",
"product_status:under_investigation": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-13\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7:5.8.2-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:165.1-2.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:52.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"image-builder\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.18.1-3.el10_0.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"6:5.4.0-15.el10_0.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.39.9-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:134.1-9.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260520103055.afee755d\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"8100020260701102925.afee755d\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"container-tools:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.41.8-3.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"2:1.43.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"6:5.8.2-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:165.1-2.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:52.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"image-builder\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:4.4.1-22.el9_2.11\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.11.4-0.1.el9_2.6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.29.7-1.el9_2.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:101.3-4.el9_4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.33.15-1.el9_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4:4.9.4-20.el9_4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.14.6-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"5:5.4.0-20.el9_6.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.144.0-2.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.39.9-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.18.1-5.el9_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:132.2-8.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler 2.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780101236\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler 2.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780101226\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler 2.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780101239\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler 2.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779953535\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781192909\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/lokistack-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782412815\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/cluster-logging-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782392961\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/lokistack-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776351169\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779135478\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778892370\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778507267\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1782204403\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-controller-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778507253\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1782204381\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778476004\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782203505\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-agent-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778476002\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777360597\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778288655\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779910504\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778503377\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778503196\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778503297\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-installer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778288646\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779910129\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782158798\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778464111\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778464072\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779212259\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.4.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779579439\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.5.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778867753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780167118\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779770049\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-mustgather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779243793\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779770057\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-mustgather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779245274\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780204322\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/submariner-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777307791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777307791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-roxctl-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776727747\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776727747\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-slim-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777307791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-v4-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-roxctl-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777986630\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-scanner-v4-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777976489\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783953372\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-controller-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780069381\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778696221\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-kube-auth-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778578758\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778711679\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782185551\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-oauth-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778152595\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781612340\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-oauth-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779253452\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781528081\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-oauth-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778139790\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779775173\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779776767\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-olm-catalogd-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779777382\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-olm-operator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779778558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-framework-tools-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779775521\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-lifecycle-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779776141\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-registry-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780992173\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cloud-credential-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780991067\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-kube-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781095245\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-machine-config-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781196942\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/oc-mirror-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778004922\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-telemeter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779258037\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-machine-config-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779264135\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-olm-catalogd-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779263963\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-olm-operator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779256521\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-framework-tools-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779260263\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-lifecycle-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779265022\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-operator-registry-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779775977\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780402732\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cloud-credential-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780402633\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-kube-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780984236\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/oc-mirror-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781023907\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-oauth-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781129269\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-installer-artifacts-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781010151\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-installer-artifacts-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780943933\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-oauth-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782879990\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-agent-installer-node-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049594\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049298\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049745\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049818\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049878\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049920\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778049945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778060364\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050037\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050035\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050048\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050508\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050119\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050290\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778059723\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050352\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778050482\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045210\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676191\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778044961\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783929816\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045359\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784094353\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045374\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784093953\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045891\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784094943\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045472\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676585\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045534\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676649\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045524\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676675\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045587\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784094299\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778046067\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784094725\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045627\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676820\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045731\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676883\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045700\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676894\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778046234\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784095175\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783676977\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045858\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784093503\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783677297\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778045931\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783677345\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778046079\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783677533\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776079019\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684360\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776706744\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684068\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707205\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784054582\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707231\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784054606\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707760\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055295\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707301\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684603\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776079295\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684668\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707362\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684667\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707418\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784054873\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707377\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684707\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707947\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707456\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684779\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707526\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684831\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707526\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783684839\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055533\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707569\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055558\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707724\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784056134\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707763\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783685128\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776707771\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783685129\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776079774\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783685375\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775822432\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667125\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776403457\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783666755\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776403991\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784054598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404009\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055387\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404539\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055726\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404060\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667517\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775822689\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667577\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776404131\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667611\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406225\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055020\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406131\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667641\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406770\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406247\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667790\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406286\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667859\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406291\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667875\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667869\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406291\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783667877\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406771\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055576\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406384\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055244\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406540\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784055382\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406595\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783668266\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776406594\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783668288\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775823207\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1783669219\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782931768\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932104\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/devicefinder-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783536000\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783535989\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783536515\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932521\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783018461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783018421\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-blackbox-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537001\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932919\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932969\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933015\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933042\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537392\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-drbd-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933235\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933251\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537955\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933417\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537742\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933602\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783019377\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934054\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-volsync-plugin-mover-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-volsync-plugin-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.27::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.27\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776718585\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/traefik-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782987430\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/udi-base-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776435643\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776435613\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-query-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776435680\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.9.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776185379\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-collector-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps 1.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779116359\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Pipelines 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779865001\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Pipelines 1.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780044955\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-pipelines/pipelines-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Pipelines 1.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"cli-1.21.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"serve-tkn-cli-1-21-serve-tkn\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777374598\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777319850\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/pilot-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151270\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776238635\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776256858\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776149682\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776178280\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776178059\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776151277\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776736910\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779822261\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776752646\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779811412\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.14::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779689392\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780891395\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779204086\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779922205\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776782369\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1779811473\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776339099\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/client-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776329867\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/cosign-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780386299\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rhtas-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780053572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/createtree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780046753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-monitor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780046765\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/fulcio-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780049214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-backfill-redis-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780049214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780051354\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/timestamp-authority-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780053572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-database-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780053572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logserver-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780053572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/trillian-logsigner-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780051354\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/fetch-tsa-certs-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780052587\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/gitsign-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780049214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/rekor-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780053572\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/updatetree-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"assisted/agent-preinstall-image-builder-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/cert-manager-istio-csr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/cert-manager-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/cert-manager-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-acmesolver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"cert-manager Operator for Red Hat OpenShift\", \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/bitwarden-sdk-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:kernel_module_management:2\"], \"vendor\": \"Red Hat\", \"product\": \"Kernel Module Management Operator for Red Hat Openshift\", \"packageName\": \"kmm/kernel-module-management-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/cluster-logging-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/loki-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/loki-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/lokistack-gateway-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:5\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/opa-openshift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"packageName\": \"rhmtc/openshift-migration-log-reader-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"packageName\": \"rhmtc/openshift-migration-must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization\", \"packageName\": \"migration-toolkit-virtualization/mtv-must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization\", \"packageName\": \"mtv-candidate/mtv-must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/cluster-api-provider-aws-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hive-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hypershift-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/image-based-install-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/kube-rbac-proxy-mce-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub\", \"packageName\": \"multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-agent-base-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"ocp-tools-4/jenkins-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"openshift4/ose-jenkins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/openshift-mcp-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-cache-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-chains-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-cli-tkn-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-opc-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-results-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-results-watcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-sidecarlogresults-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-ekb-dispatcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-ekb-kafka-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-ekb-receiver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-apiserver-receive-adapter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-channel-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-channel-dispatcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-filter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-ingress-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-jobsink-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-mtchannel-broker-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-mtping-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-eventing-webhook-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/serverless-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/istio-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/power-monitoring-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-multicluster-observability-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/kube-rbac-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/kube-state-metrics-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/submariner-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-25/aap-must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/aap-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-on-clouds/aoc-azure-aap-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:kueue_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Kueue\", \"packageName\": \"kueue/kueue-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop\", \"packageName\": \"podman-desktop-macos-1-0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop\", \"packageName\": \"podman-desktop-windows-1-0\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-bootc-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:podman_desktop:0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Build of Podman Desktop - Tech Preview\", \"packageName\": \"rhdesktop/rh-podman-desktop-ext-rhel-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/authorino-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10-eus/rhel-10.0-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9-eus/rhel-9.6-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-api-server-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-launcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-o\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"lvms4/lvms-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/cnf-tests-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/cnf-tests-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/kube-compare-artifacts-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/lifecycle-agent-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/network-tools-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/numaresources-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-api-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-csr-approver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-agent-installer-orchestrator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-aws-cluster-api-controllers-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-aws-pod-identity-webhook-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-azure-workload-identity-webhook-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-baremetal-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cli-artifacts-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-csi-driver-shared-resource-mustgather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-deployer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-docker-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-docker-builder-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-helm-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-local-storage-mustgather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-machine-os-images-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ovn-kubernetes-microshift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ovn-kubernetes-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-secrets-store-csi-mustgather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-tests-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-tools-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ptp-must-gather-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-kni/commatrix\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"redhat/redhat-operator-index\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/mcg-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/oauth2-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/udi-base-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-agent-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/must-gather-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-tekton-tasks-create-datavolume-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-tekton-tasks-disk-virt-customize-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-apiserver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-cloner-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-importer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-uploadproxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-cdi-uploadserver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/openstack-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/openstack-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/prometheus-podman-exporter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/clair-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/clair-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-builder-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-builder-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/certificate-transparency-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/ec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/model-transparency-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/policy-controller-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-security-profiles-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-security-profiles-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-controller-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-oidc-discovery-provider-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-04-06T17:01:34.639Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-06T16:22:45.353Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:17789: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20569: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19719: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27856: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17040: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16696: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22937: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19135: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19017: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33722: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35833: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25252: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25248: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25250: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34192: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:32991: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34196: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34197: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19721: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20607: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19720: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26054: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17287: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20609: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10135: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19186: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23228: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19353: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19173: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26636: Custom Metric Autoscaler 2.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26585: Logging for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22423: Multicluster Global Hub 1.3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22347: Multicluster Global Hub 1.4.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21769: Multicluster Global Hub 1.5.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23345: Multicluster Global Hub 1.6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29854: OpenShift API for Data Protection 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26568: OpenShift API for Data Protection 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25127: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13791: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13829: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24977: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19712: Red Hat OpenShift AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34099: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17598: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27001: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17448: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27004: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20041: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27063: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21703: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25194: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17468: Red Hat OpenShift Container Platform 4.20\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25187: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21709: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23241: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27044: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20034: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17474: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34794: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25206: Red Hat OpenShift Container Platform 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10175: Red Hat OpenShift Dev Spaces 3.27\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20946: Red Hat OpenShift GitOps 1.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24484: Red Hat OpenShift Pipelines 1.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21932: Red Hat OpenShift Pipelines 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21931: Red Hat OpenShift Pipelines 1.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11688: Red Hat OpenShift Service Mesh 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9448: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8490: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9453: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8491: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8493: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9388: Red Hat OpenShift distributed tracing 3.9.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9385: Red Hat OpenShift distributed tracing 3.9.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17550: Red Hat Openshift Data Foundation 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41941: Red Hat Openshift Data Foundation 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17547: Red Hat Openshift Data Foundation 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41944: Red Hat Openshift Data Foundation 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12279: Red Hat Openshift Data Foundation 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12277: Red Hat Openshift Data Foundation 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40984: Red Hat Openshift Data Foundation 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11856: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22629: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21017: Red Hat Quay 3.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24853: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19375: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22465: Red Hat Quay 3.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11916: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22840: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23361: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11996: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10125: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10130: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24475: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24482: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24479: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24477: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24471: Red Hat Trusted Artifact Signer 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19108: multicluster engine for Kubernetes 2.11.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12116: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19099: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28198: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17459: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17458: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11512: multicluster engine for Kubernetes 2.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17123: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22258: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17121: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22260: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30650: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:18584: multicluster engine for Kubernetes 2.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:18585: multicluster engine for Kubernetes 2.9\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-04-06T16:22:45.353Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-34986\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2455470\", \"name\": \"RHBZ#2455470\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17789\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20569\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19719\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27856\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17040\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16696\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22937\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19135\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22450\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19017\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33722\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35833\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25252\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25248\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25250\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34192\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:32991\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34196\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19721\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20607\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19720\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26054\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17287\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20609\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10135\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19186\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23228\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19353\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22714\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19173\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26636\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34364\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22423\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22347\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21769\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23345\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29854\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26568\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25127\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11070\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11217\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13791\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13829\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24977\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34099\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17598\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27001\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17448\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27004\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20041\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27063\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17468\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25187\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21709\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23241\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27044\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20034\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17474\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34794\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25206\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10175\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36820\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24484\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21932\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21931\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11688\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9448\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8490\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9453\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8491\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8493\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9388\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9385\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17550\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41941\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17547\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41944\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12279\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37387\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12277\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40984\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11856\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22629\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21017\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24853\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19375\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22465\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11916\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22840\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23361\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11996\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10125\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10130\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24475\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24482\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24479\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24477\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24471\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19108\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12116\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19099\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28198\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17459\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17458\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11512\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17123\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22258\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17121\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22260\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30650\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:18584\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:18585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-131\", \"description\": \"Incorrect Calculation of Buffer Size\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-22T12:08:46.893Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-34986\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-07T14:21:42.477191Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-07T14:21:49.130Z\"}}], \"cna\": {\"title\": \"Go JOSE affect by a panic in JWE decryption\", \"source\": {\"advisory\": \"GHSA-78h2-9frx-2jm8\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"go-jose\", \"product\": \"go-jose\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003e= 4.0.0, \u003c 4.1.4\"}, {\"status\": \"affected\", \"version\": \"\u003c 3.0.5\"}]}], \"references\": [{\"url\": \"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\", \"name\": \"https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants\", \"name\": \"https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-248\", \"description\": \"CWE-248: Uncaught Exception\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-04-06T16:22:45.353Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-34986\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-22T12:08:46.893Z\", \"dateReserved\": \"2026-03-31T19:38:31.617Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-04-06T16:22:45.353Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
OPENSUSE-SU-2026:11305-1
Vulnerability from csaf_opensuse - Published: 2026-07-18 00:00 - Updated: 2026-07-18 00:00Summary
containerized-data-importer1.65-api-1.65.0-2.1 on GA media
Severity
Moderate
Notes
Title of the patch: containerized-data-importer1.65-api-1.65.0-2.1 on GA media
Description of the patch: These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-2.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-11305
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.4 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.4 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
46 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "containerized-data-importer1.65-api-1.65.0-2.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the containerized-data-importer1.65-api-1.65.0-2.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-11305",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11305-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22870 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22870/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22872 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22872/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-58058 page",
"url": "https://www.suse.com/security/cve/CVE-2025-58058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-58190 page",
"url": "https://www.suse.com/security/cve/CVE-2025-58190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27136 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33186 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34986 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-35469 page",
"url": "https://www.suse.com/security/cve/CVE-2026-35469/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39821 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39827 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39827/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39828 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39832 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42508 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42508/"
}
],
"title": "containerized-data-importer1.65-api-1.65.0-2.1 on GA media",
"tracking": {
"current_release_date": "2026-07-18T00:00:00Z",
"generator": {
"date": "2026-07-18T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:11305-1",
"initial_release_date": "2026-07-18T00:00:00Z",
"revision_history": [
{
"date": "2026-07-18T00:00:00Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"product": {
"name": "containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"product_id": "containerized-data-importer1.65-api-1.65.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"product": {
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"product_id": "containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"product": {
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"product_id": "containerized-data-importer1.65-controller-1.65.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"product": {
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"product_id": "containerized-data-importer1.65-importer-1.65.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"product": {
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"product_id": "containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"product": {
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"product_id": "containerized-data-importer1.65-operator-1.65.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"product": {
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"product_id": "containerized-data-importer1.65-tests-1.65.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"product": {
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"product_id": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"product": {
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"product_id": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64"
}
},
{
"category": "product_version",
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"product": {
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"product_id": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"product": {
"name": "containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"product_id": "containerized-data-importer1.65-api-1.65.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"product": {
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"product_id": "containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"product": {
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"product_id": "containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"product": {
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"product_id": "containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"product": {
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"product_id": "containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"product": {
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"product_id": "containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"product": {
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"product_id": "containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"product": {
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"product_id": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"product": {
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"product_id": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le"
}
},
{
"category": "product_version",
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"product": {
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"product_id": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"product": {
"name": "containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"product_id": "containerized-data-importer1.65-api-1.65.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"product": {
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"product_id": "containerized-data-importer1.65-cloner-1.65.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"product": {
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"product_id": "containerized-data-importer1.65-controller-1.65.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"product": {
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"product_id": "containerized-data-importer1.65-importer-1.65.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"product": {
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"product_id": "containerized-data-importer1.65-manifests-1.65.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"product": {
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"product_id": "containerized-data-importer1.65-operator-1.65.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"product": {
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"product_id": "containerized-data-importer1.65-tests-1.65.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"product": {
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"product_id": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"product": {
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"product_id": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x"
}
},
{
"category": "product_version",
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"product": {
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"product_id": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"product": {
"name": "containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"product_id": "containerized-data-importer1.65-api-1.65.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"product": {
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"product_id": "containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"product": {
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"product_id": "containerized-data-importer1.65-controller-1.65.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"product": {
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"product_id": "containerized-data-importer1.65-importer-1.65.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"product": {
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"product_id": "containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"product": {
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"product_id": "containerized-data-importer1.65-operator-1.65.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"product": {
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"product_id": "containerized-data-importer1.65-tests-1.65.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"product": {
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"product_id": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"product": {
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"product_id": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64"
}
},
{
"category": "product_version",
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64",
"product": {
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64",
"product_id": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-api-1.65.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64"
},
"product_reference": "containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-api-1.65.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le"
},
"product_reference": "containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-api-1.65.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x"
},
"product_reference": "containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-api-1.65.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64"
},
"product_reference": "containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64"
},
"product_reference": "containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le"
},
"product_reference": "containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x"
},
"product_reference": "containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64"
},
"product_reference": "containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64"
},
"product_reference": "containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le"
},
"product_reference": "containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x"
},
"product_reference": "containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-controller-1.65.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64"
},
"product_reference": "containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64"
},
"product_reference": "containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le"
},
"product_reference": "containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x"
},
"product_reference": "containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-importer-1.65.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64"
},
"product_reference": "containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64"
},
"product_reference": "containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le"
},
"product_reference": "containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x"
},
"product_reference": "containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64"
},
"product_reference": "containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64"
},
"product_reference": "containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le"
},
"product_reference": "containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x"
},
"product_reference": "containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-operator-1.65.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64"
},
"product_reference": "containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64"
},
"product_reference": "containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le"
},
"product_reference": "containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x"
},
"product_reference": "containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-tests-1.65.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64"
},
"product_reference": "containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64"
},
"product_reference": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le"
},
"product_reference": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x"
},
"product_reference": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64"
},
"product_reference": "containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64"
},
"product_reference": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le"
},
"product_reference": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x"
},
"product_reference": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64"
},
"product_reference": "containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64"
},
"product_reference": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le"
},
"product_reference": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x"
},
"product_reference": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
},
"product_reference": "obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22870",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22870"
}
],
"notes": [
{
"category": "general",
"text": "Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to \"*.example.com\", a request to \"[::1%25.example.com]:80` will incorrectly match and not be proxied.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22870",
"url": "https://www.suse.com/security/cve/CVE-2025-22870"
},
{
"category": "external",
"summary": "SUSE Bug 1238572 for CVE-2025-22870",
"url": "https://bugzilla.suse.com/1238572"
},
{
"category": "external",
"summary": "SUSE Bug 1238611 for CVE-2025-22870",
"url": "https://bugzilla.suse.com/1238611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-22870"
},
{
"cve": "CVE-2025-22872",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22872"
}
],
"notes": [
{
"category": "general",
"text": "The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. \u003cmath\u003e, \u003csvg\u003e, etc contexts).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22872",
"url": "https://www.suse.com/security/cve/CVE-2025-22872"
},
{
"category": "external",
"summary": "SUSE Bug 1241710 for CVE-2025-22872",
"url": "https://bugzilla.suse.com/1241710"
},
{
"category": "external",
"summary": "SUSE Bug 1265255 for CVE-2025-22872",
"url": "https://bugzilla.suse.com/1265255"
},
{
"category": "external",
"summary": "SUSE Bug 1265256 for CVE-2025-22872",
"url": "https://bugzilla.suse.com/1265256"
},
{
"category": "external",
"summary": "SUSE Bug 1265259 for CVE-2025-22872",
"url": "https://bugzilla.suse.com/1265259"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-22872"
},
{
"cve": "CVE-2025-58058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-58058"
}
],
"notes": [
{
"category": "general",
"text": "xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory consumption because the current implementation allocates the full decoding buffer directly after reading the header. The LZMA header doesn\u0027t include a magic number or has a checksum to detect such an issue according to the specification. Note that the code recognizes the issue later while reading the stream, but at this time the memory allocation has already been done. This issue has been patched in version 0.5.14.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-58058",
"url": "https://www.suse.com/security/cve/CVE-2025-58058"
},
{
"category": "external",
"summary": "SUSE Bug 1248889 for CVE-2025-58058",
"url": "https://bugzilla.suse.com/1248889"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-58058"
},
{
"cve": "CVE-2025-58190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-58190"
}
],
"notes": [
{
"category": "general",
"text": "The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-58190",
"url": "https://www.suse.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "SUSE Bug 1251309 for CVE-2025-58190",
"url": "https://bugzilla.suse.com/1251309"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-58190"
},
{
"cve": "CVE-2026-27136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27136"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27136",
"url": "https://www.suse.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-27136",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-27136"
},
{
"cve": "CVE-2026-33186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33186"
}
],
"notes": [
{
"category": "general",
"text": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, \"deny\" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback \"allow\" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific \"deny\" rules for canonical paths but allows other requests by default (a fallback \"allow\" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33186",
"url": "https://www.suse.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "SUSE Bug 1260085 for CVE-2026-33186",
"url": "https://bugzilla.suse.com/1260085"
},
{
"category": "external",
"summary": "SUSE Bug 1268676 for CVE-2026-33186",
"url": "https://bugzilla.suse.com/1268676"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-33186"
},
{
"cve": "CVE-2026-34986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34986"
}
],
"notes": [
{
"category": "general",
"text": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34986",
"url": "https://www.suse.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "SUSE Bug 1262805 for CVE-2026-34986",
"url": "https://bugzilla.suse.com/1262805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-34986"
},
{
"cve": "CVE-2026-35469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-35469"
}
],
"notes": [
{
"category": "general",
"text": "spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes - all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-35469",
"url": "https://www.suse.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "SUSE Bug 1262264 for CVE-2026-35469",
"url": "https://bugzilla.suse.com/1262264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-35469"
},
{
"cve": "CVE-2026-39821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39821"
}
],
"notes": [
{
"category": "general",
"text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39821",
"url": "https://www.suse.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "SUSE Bug 1266474 for CVE-2026-39821",
"url": "https://bugzilla.suse.com/1266474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-39821"
},
{
"cve": "CVE-2026-39827",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39827"
}
],
"notes": [
{
"category": "general",
"text": "An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection\u0027s internal state and released for garbage collection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39827",
"url": "https://www.suse.com/security/cve/CVE-2026-39827"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39827",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-39827"
},
{
"cve": "CVE-2026-39828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39828"
}
],
"notes": [
{
"category": "general",
"text": "When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39828",
"url": "https://www.suse.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39828",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-39828"
},
{
"cve": "CVE-2026-39832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39832"
}
],
"notes": [
{
"category": "general",
"text": "When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39832",
"url": "https://www.suse.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39832",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-39832"
},
{
"cve": "CVE-2026-42508",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42508"
}
],
"notes": [
{
"category": "general",
"text": "Previously, a revoked \u0027SignatureKey\u0027 belonging to a CA was not correctly checked for revocation. Now, both the \u0027key\u0027 and \u0027key.SignatureKey\u0027 are checked for @revoked.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42508",
"url": "https://www.suse.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-42508",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-api-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-cloner-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-controller-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-importer-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-manifests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-operator-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-tests-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadproxy-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:containerized-data-importer1.65-uploadserver-1.65.0-2.1.x86_64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.aarch64",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.ppc64le",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.s390x",
"openSUSE Tumbleweed:obs-service-cdi1.65_containers_meta-1.65.0-2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-42508"
}
]
}
OPENSUSE-SU-2026:20711-1
Vulnerability from csaf_opensuse - Published: 2026-05-09 08:42 - Updated: 2026-05-09 08:42Summary
Security update for hauler
Severity
Important
Notes
Title of the patch: Security update for hauler
Description of the patch: This update for hauler fixes the following issues:
Changes in hauler:
- update to 1.4.3 ( bsc#1262353, CVE-2026-39984, bsc#1262942, CVE-2026-34986):
* [1.4] Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0
in the go_modules group across 1 directory
* [1.4] Bump github.com/sigstore/timestamp-authority/v2 from
2.0.4 to 2.0.6 in the go_modules group across 1 directory
* [1.4] Bump google.golang.org/grpc from 1.78.0 to 1.79.3 in
the go_modules group across 1 directory
* fixed versions and dependencies on release/1.4
* [1.4] removed unnecessary rewrite flag from sync
* added makefile command for vulnerability checks (backport #577)
* remove cherrypick bot and add mergify details (backport #581)
Patchnames: openSUSE-Leap-16.0-packagehub-238
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for hauler",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for hauler fixes the following issues:\n\nChanges in hauler:\n\n- update to 1.4.3 ( bsc#1262353, CVE-2026-39984, bsc#1262942, CVE-2026-34986):\n * [1.4] Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0\n in the go_modules group across 1 directory\n * [1.4] Bump github.com/sigstore/timestamp-authority/v2 from\n 2.0.4 to 2.0.6 in the go_modules group across 1 directory\n * [1.4] Bump google.golang.org/grpc from 1.78.0 to 1.79.3 in\n the go_modules group across 1 directory\n * fixed versions and dependencies on release/1.4\n * [1.4] removed unnecessary rewrite flag from sync\n * added makefile command for vulnerability checks (backport #577)\n * remove cherrypick bot and add mergify details (backport #581)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-packagehub-238",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20711-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1262353",
"url": "https://bugzilla.suse.com/1262353"
},
{
"category": "self",
"summary": "SUSE Bug 1262942",
"url": "https://bugzilla.suse.com/1262942"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34986 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39984 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39984/"
}
],
"title": "Security update for hauler",
"tracking": {
"current_release_date": "2026-05-09T08:42:06Z",
"generator": {
"date": "2026-05-09T08:42:06Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:20711-1",
"initial_release_date": "2026-05-09T08:42:06Z",
"revision_history": [
{
"date": "2026-05-09T08:42:06Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "hauler-1.4.3-bp160.1.1.aarch64",
"product": {
"name": "hauler-1.4.3-bp160.1.1.aarch64",
"product_id": "hauler-1.4.3-bp160.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "hauler-1.4.3-bp160.1.1.x86_64",
"product": {
"name": "hauler-1.4.3-bp160.1.1.x86_64",
"product_id": "hauler-1.4.3-bp160.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "hauler-1.4.3-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.aarch64"
},
"product_reference": "hauler-1.4.3-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "hauler-1.4.3-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.x86_64"
},
"product_reference": "hauler-1.4.3-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34986"
}
],
"notes": [
{
"category": "general",
"text": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.aarch64",
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34986",
"url": "https://www.suse.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "SUSE Bug 1262805 for CVE-2026-34986",
"url": "https://bugzilla.suse.com/1262805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.aarch64",
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.aarch64",
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-09T08:42:06Z",
"details": "important"
}
],
"title": "CVE-2026-34986"
},
{
"cve": "CVE-2026-39984",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39984"
}
],
"notes": [
{
"category": "general",
"text": "Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function. VerifyTimestampResponse correctly verifies the certificate chain signature, but the TSA-specific constraint checks in VerifyLeafCert uses the first non-CA certificate from the PKCS#7 certificate bag instead of the leaf certificate from the verified chain. An attacker can exploit this by prepending a forged certificate to the certificate bag while the message is signed with an authorized key, causing the library to validate the signature against one certificate but perform authorization checks against another. This vulnerability only affects users of the timestamp-authority/v2/pkg/verification package and does not affect the timestamp-authority service itself or sigstore-go. The issue has been fixed in version 2.0.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.aarch64",
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39984",
"url": "https://www.suse.com/security/cve/CVE-2026-39984"
},
{
"category": "external",
"summary": "SUSE Bug 1262338 for CVE-2026-39984",
"url": "https://bugzilla.suse.com/1262338"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.aarch64",
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.aarch64",
"openSUSE Leap 16.0:hauler-1.4.3-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-09T08:42:06Z",
"details": "moderate"
}
],
"title": "CVE-2026-39984"
}
]
}
OPENSUSE-SU-2026:21210-1
Vulnerability from csaf_opensuse - Published: 2026-07-02 09:47 - Updated: 2026-07-02 09:47Summary
Security update for google-osconfig-agent
Severity
Important
Notes
Title of the patch: Security update for google-osconfig-agent
Description of the patch: This update for google-osconfig-agent fixes the following issues
- CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers.
- CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents
(bsc#1251453).
- CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially
crafted input (bsc#1251704).
- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-
header (bsc#1260264).
- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE
(bsc#1265762).
- CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead to a denial of
service (bsc#1262926).
- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation
bypass and privilege escalation (bsc#1266603).
- CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh (bsc#1266171).
- CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266171).
- CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh (bsc#1266171).
- CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
(bsc#1266171).
- CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
(bsc#1266171).
- CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
(bsc#1266171).
- CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266171).
- CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266171).
- CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh (bsc#1266171).
- CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
(bsc#1266171).
- CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
(bsc#1266171).
- CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh (bsc#1266171).
- CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent (bsc#1266171).
- CVE-2026-41506: github.com/go-git/go-git/v5: HTTP authentication credential leak when following redirects during
smart-HTTP clone and fetch operations (bsc#1264923).
Changes for google-osconfig-agent:
- Update to version 20260615.01
* Upgrade golang.org/x/crypto & golang.org/x/net (#1006)
- from version 20260615.00
* Add unit tests for ospatch_apt_upgrade.go (#938)
- Update to version 20260611.00
* Add unit tests for policies/policies.go PART 5 (#998)
- from version 20260610.00
* Add unit tests for policies/policies.go PART 4 (#997)
- from version 20260609.02
* squash commits (#936)
- from version 20260609.01
* Add unit tests for policies/policies.go PART 3 (#996)
- from version 20260609.00
* Add unit tests for policies/policies.go PART 2 (#991)
- from version 20260602.01
* Align format of dates and timestamp collected across Windows packages (#973)
- from version 20260602.00
* Add unit tests for config/config,go (#979)
- from version 20260528.00
* Bump github.com/containerd/containerd (#990)
- from version 20260521.00
* Cover agentconfig functionality by unit tests (#925)
- from version 20260520.04
* Add unit tests for policies/googet.go (#961)
* Bump github.com/go-git/go-git/v5 (#987)
- from version 20260520.02
* Add unit tests for policies/yum.go (#952)
* Add unit tests for policies/apt.go PART 3 (#951)
- from version 20260520.00
* Add unit tests for policies/zypper.go (#953)
- from version 20260519.00
* Add unit tests for policies/policies.go PART 1 (#949)
- from version 20260513.01
* Bump github.com/go-git/go-git/v5 (#981), this also updates
golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)
- from version 20260513.00
* upgrade a few packages (#980)
- from version 20260512.02
* Add/improve unit tests for agentendpoint/exec_task.go (#933)
- from version 20260512.01
* Cover google_update.go by unit tests (#941)
- from version 20260512.00
* Change zone for arm64 builds because of stockout (#978)
- Update to version 20260511.00
* switch to t2a-standard-2 on ARM package build (#977)
- from version 20260505.03
* Cover zypper_patch by unit tests (#958)
- from version 20260505.02
* Remove unused functions DisableAutoUpdates (#970)
- from version 20260505.01
* Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)
- from version 20260505.00
* Upgrade a few dependencies across the repo (#968)
+ github.com/go-git/go-git/v5 5.16.2->5.18.0 (bsc#1264923, CVE-2026-41506)
+ github.com/go-jose/go-jose/v4 4.1.3->4.1.4 (bsc#1262926, CVE-2026-34986)
+ github.com/go-viper/mapstructure/v2 2.3.0->2.4.0
+ go.opentelemetry.io/otel 1.40.0->1.41.0
+ go.opentelemetry.io/otel/sdk 1.39.0->1.43.0
- from version 20260504.01
* bump github.com/docker/cli to 29.2.0 (#962)
- from version 20260504.00
* Bump github.com/opencontainers/selinux (#960)
- Update to version 20260428.00
* Add/improve unit tests for agentendpoint/agentendpoint.go (#930)
- from version 20260427.03
* Cover config/file.go by unit tests (#935)
- from version 20260422.01
* Cover patch_linux.go by unit tests (#932)
- from version 20260422.00
* upgrade grpc package in main package and e2e tests (#959)
(bsc#1260264, CVE-2026-33186)
- from version 20260417.04
* Bump OSV-Scalibr version to v0.4.3 (#956)
- from version 20260417.03
* Add unit tests for updates_linux.go (#937)
- from version 20260417.02
* Add zone to CreateDisk step (#955)
- from version 20260417.01
* Change disk type for deb11 (#954)
- from version 20260417.00
* Add unit tests for policies/apt.go PART 1 (#950)
- from version 20260410.02
* Add unit tests for packages/pty_linux.go (#943)
- from version 20260410.01
* fix disk type for arm workflows (#948)
- from version 20260410.00
* Change machine type for arm based workflows (#946)
- Update to version 20260330.00
* bump timeouts for all workflows (#940)
- from version 20260326.00
* Cover exec_resource.go by unit tests (#934)
- from version 20260318.00
* Integrate OSConfig agent with ReportVmInventory (#923)
- from version 20260313.02
* remove cacheonly flag from yum upgrade (#924)
- from version 20260313.01
* conditions python version override (#927)
- from version 20260313.00
* Fix presubmits by explicitly set python version for rpm based systems (#926)
- from version 20260311.00
* Bump osconfig version (#922)
- from version 20260309.02
* Extend OSV scalibr extractor (#921)
- from version 20260309.01
* upgrade golang.org/x/crypto and it's transitive deps (#918)
- from version 20260309.00
* Add purl to pkg info (#920)
- from version 20260306.00
* Add 'Type' field to PkgInfo (#919)
- from version 20260303.01
* Upgrade go.opentelemetry.io/otel/sdk (#913)
- from version 20260303.00
* Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)
- from version 20260302.00
* Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)
- from version 20260126.00
* Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)
* Bump github.com/sirupsen/logrus (#894)
- Update to version 20260119.00
* Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)
- Update to version 20251230.00
* chore: Migrate gsutil usage to gcloud storage (#904)
- from version 20251223.00
* fix e2e tests for report inventory (#903)
- from version 20251222.01
* Revert "Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)" (#902)
- from version 20251222.00
* Bump golang to the new version (#900)
- from version 20251218.00
* add new CODEOWNERS (#901)
- from version 20251217.00
* Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)
- Bump the golang compiler version to 1.24.5
- Update to version 20251202.00
* Revert "Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)" (#893)
- Update to version 20251201.00
* Revert "Bump github.com/containerd/containerd (#890)" (#892)
- Update to version 20251126.00
* Bump github.com/containerd/containerd (#890)
* Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)
- Update to version 20251028.00
* Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)
* Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)
- from version 20251023.02
* Create multiple_os.yaml (#883)
- from version 20251023.00
* Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)
* Add test runner for e2e tests (#876)
- Update to version 20250925.00
* Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)
* Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)
* Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)
* Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)
- Update to version 20250902.01
* Bump github.com/googleapis/enterprise-certificate-proxy (#829)
- from version 20250902.00
* update github.com/go-jose/go-jose/v4 (#869)
* Upgrade scalibr and other deps (#866)
- from version 20250901.00
* Fix possibility of path traversal for zip and tar archival (#868)
- from version 20250825.00
* set CODEOWNERS file as required by org (#863)
- from version 20250819.00
* Fix/rhel10 build centos image (#860)
- from version 20250814.00
* Fix/rhel10 build image (#859)
- from version 20250813.00
* Fix: Add RHEL 10 support to RPM startup script (#858)
- from version 20250811.00
* Remove old/sles-15-sp4-sap as image is deprecated (#857)
- Update to version 20250806.00
* Fixed JSON identifier for the universe domain (#855)
- from version 20250729.00
* Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)
- from version 20250725.02
* Update utils.go (#854)
* Upgrade golang.org/x/oauth2 package to the latest. (#853)
* Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)
- from version 20250725.01
* Bump golang.org/x/oauth2 (#848)
* Port fix for debian 11 to goo package manager. (#852)
- from version 20250725.00
* Update Golang version in common.sh and skip backports
repo for debian 11 (#850)
- from version 20250723.01
* Add workflows to build package for el10 (#849)
- from version 20250721.00
* Make OS Config agent TPC aware (#846)
- from version 20250718.00
* Create workflows for new Debian 13. (#847)
- Update to version 20250703.00
* Fix sles images (#844)
- from version 20250702.00
* Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)
- from version 20250701.00
* Bump the go_modules group across 1 directory with 2 updates (#840)
- Update to version 20250606.00
* Change base docker images Google's official base images. (#838)
- Update to version 20250523.01
* Add a simple no-op OS policy for user testing (#837)
- from version 20250523.00
* Introduce scalibr inventory extractor for dpkg/rpm/cos
os/filesystem extractors (linux) (#834)
* Trace GetInstalledPackages memory levels (#835)
- from version 20250520.00
- Update to version 20250513.00
* Fix rpm extractor, handle (none) value correctly. (#833)
- from version 20250512.01
* Bump github.com/envoyproxy/go-control-plane from 0.13.1 to 0.13.4 (#816)
- from version 20250512.00
* Bump golang.org/x/net from 0.39.0 to 0.40.0 (#819)
- from version 20250508.01
* cosmetic refactoring to osinfo package (#826)
- from version 20250508.00
* Refactor /inventory with dependency injection (#825)
* Add debian, ubuntu (InstalledDebPackages) snapshots (#821)
* cover packages_linux.go file with tests (#824)
* Add debian (10,11,12) GetPackageUpdates output snapshots (#822)
- from version 20250507.00
* Add InstalledRPMPackages snapshot tests (#823)
- from version 20250506.02
* Yum tests: simplify initialization of exit errors (#820)
- from version 20250506.01
* Improve test coverage for gem package manager (#818)
- from version 20250506.00
* after go/x/crypto update 0.32.0 -> 0.37.0 (#817)
- from version 20250505.01
* Improve packages package coverage (#814)
* Bump golang.org/x/net from 0.34.0 to 0.39.0 (#807)
- from version 20250505.00
* Bump golang.org/x/crypto from 0.32.0 to 0.37.0 (#806)
- from version 20250430.00
* Snapshot YumUpdates (GetPackageUpdates) output (#813)
- from version 20250428.00
* Snapshot ZypperPatches, ZypperUpdates (GetPackageUpdates) output
for sles 12, 15 testdata (#812)
- from version 20250423.00
* Introduce MatchSnapshot large test results matcher function, snapshot
apt-deb GetPackageUpdates (#811)
- from version 20250416.02
Patchnames: openSUSE-Leap-16.0-1136
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.3 (Medium)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.4 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.4 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.7 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
80 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for google-osconfig-agent",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for google-osconfig-agent fixes the following issues\n\n- CVE-2023-45288: golang.org/x/net/http2: close connections when receiving too many headers.\n- CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents\n (bsc#1251453).\n- CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially\n crafted input (bsc#1251704).\n- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-\n header (bsc#1260264).\n- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE\n (bsc#1265762).\n- CVE-2026-34986: github.com/go-jose/go-jose/v4: crafted JWE input with a missing encrypted key can lead to a denial of\n service (bsc#1262926).\n- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation\n bypass and privilege escalation (bsc#1266603).\n- CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh (bsc#1266171).\n- CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266171).\n- CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh (bsc#1266171).\n- CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh\n (bsc#1266171).\n- CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh\n (bsc#1266171).\n- CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent\n (bsc#1266171).\n- CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266171).\n- CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266171).\n- CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh (bsc#1266171).\n- CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts\n (bsc#1266171).\n- CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh\n (bsc#1266171).\n- CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh (bsc#1266171).\n- CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent (bsc#1266171).\n- CVE-2026-41506: github.com/go-git/go-git/v5: HTTP authentication credential leak when following redirects during\n smart-HTTP clone and fetch operations (bsc#1264923).\n\nChanges for google-osconfig-agent:\n\n- Update to version 20260615.01\n * Upgrade golang.org/x/crypto \u0026 golang.org/x/net (#1006)\n- from version 20260615.00\n * Add unit tests for ospatch_apt_upgrade.go (#938)\n- Update to version 20260611.00\n * Add unit tests for policies/policies.go PART 5 (#998)\n- from version 20260610.00\n * Add unit tests for policies/policies.go PART 4 (#997)\n- from version 20260609.02\n * squash commits (#936)\n- from version 20260609.01\n * Add unit tests for policies/policies.go PART 3 (#996)\n- from version 20260609.00\n * Add unit tests for policies/policies.go PART 2 (#991)\n- from version 20260602.01\n * Align format of dates and timestamp collected across Windows packages (#973)\n- from version 20260602.00\n * Add unit tests for config/config,go (#979)\n- from version 20260528.00\n * Bump github.com/containerd/containerd (#990)\n- from version 20260521.00\n * Cover agentconfig functionality by unit tests (#925)\n- from version 20260520.04\n * Add unit tests for policies/googet.go (#961)\n * Bump github.com/go-git/go-git/v5 (#987)\n- from version 20260520.02\n * Add unit tests for policies/yum.go (#952)\n * Add unit tests for policies/apt.go PART 3 (#951)\n- from version 20260520.00\n * Add unit tests for policies/zypper.go (#953)\n- from version 20260519.00\n * Add unit tests for policies/policies.go PART 1 (#949)\n- from version 20260513.01\n * Bump github.com/go-git/go-git/v5 (#981), this also updates\n golang.org/x/net to v0.53.0 (bsc#1265762, CVE-2026-33814)\n- from version 20260513.00\n * upgrade a few packages (#980)\n- from version 20260512.02\n * Add/improve unit tests for agentendpoint/exec_task.go (#933)\n- from version 20260512.01\n * Cover google_update.go by unit tests (#941)\n- from version 20260512.00\n * Change zone for arm64 builds because of stockout (#978)\n- Update to version 20260511.00\n * switch to t2a-standard-2 on ARM package build (#977)\n- from version 20260505.03\n * Cover zypper_patch by unit tests (#958)\n- from version 20260505.02\n * Remove unused functions DisableAutoUpdates (#970)\n- from version 20260505.01\n * Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#966)\n- from version 20260505.00\n * Upgrade a few dependencies across the repo (#968)\n + github.com/go-git/go-git/v5 5.16.2-\u003e5.18.0 (bsc#1264923, CVE-2026-41506)\n + github.com/go-jose/go-jose/v4 4.1.3-\u003e4.1.4 (bsc#1262926, CVE-2026-34986)\n + github.com/go-viper/mapstructure/v2 2.3.0-\u003e2.4.0\n + go.opentelemetry.io/otel 1.40.0-\u003e1.41.0\n + go.opentelemetry.io/otel/sdk 1.39.0-\u003e1.43.0\n- from version 20260504.01\n * bump github.com/docker/cli to 29.2.0 (#962)\n- from version 20260504.00\n * Bump github.com/opencontainers/selinux (#960)\n- Update to version 20260428.00\n * Add/improve unit tests for agentendpoint/agentendpoint.go (#930)\n- from version 20260427.03\n * Cover config/file.go by unit tests (#935)\n- from version 20260422.01\n * Cover patch_linux.go by unit tests (#932)\n- from version 20260422.00\n * upgrade grpc package in main package and e2e tests (#959)\n (bsc#1260264, CVE-2026-33186)\n- from version 20260417.04\n * Bump OSV-Scalibr version to v0.4.3 (#956)\n- from version 20260417.03\n * Add unit tests for updates_linux.go (#937)\n- from version 20260417.02\n * Add zone to CreateDisk step (#955)\n- from version 20260417.01\n * Change disk type for deb11 (#954)\n- from version 20260417.00\n * Add unit tests for policies/apt.go PART 1 (#950)\n- from version 20260410.02\n * Add unit tests for packages/pty_linux.go (#943)\n- from version 20260410.01\n * fix disk type for arm workflows (#948)\n- from version 20260410.00\n * Change machine type for arm based workflows (#946)\n- Update to version 20260330.00\n * bump timeouts for all workflows (#940)\n- from version 20260326.00\n * Cover exec_resource.go by unit tests (#934)\n- from version 20260318.00\n * Integrate OSConfig agent with ReportVmInventory (#923)\n- from version 20260313.02\n * remove cacheonly flag from yum upgrade (#924)\n- from version 20260313.01\n * conditions python version override (#927)\n- from version 20260313.00\n * Fix presubmits by explicitly set python version for rpm based systems (#926)\n- from version 20260311.00\n * Bump osconfig version (#922)\n- from version 20260309.02\n * Extend OSV scalibr extractor (#921)\n- from version 20260309.01\n * upgrade golang.org/x/crypto and it\u0027s transitive deps (#918)\n- from version 20260309.00\n * Add purl to pkg info (#920)\n- from version 20260306.00\n * Add \u0027Type\u0027 field to PkgInfo (#919)\n- from version 20260303.01\n * Upgrade go.opentelemetry.io/otel/sdk (#913)\n- from version 20260303.00\n * Bump github.com/vbatts/tar-split from 0.11.5 to 0.12.2 (#908)\n- from version 20260302.00\n * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.7 (#906)\n- from version 20260126.00\n * Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.39.0 (#905)\n * Bump github.com/sirupsen/logrus (#894)\n- Update to version 20260119.00\n * Bump cloud.google.com/go/storage from 1.56.0 to 1.58.0 (#899)\n- Update to version 20251230.00\n * chore: Migrate gsutil usage to gcloud storage (#904)\n- from version 20251223.00\n * fix e2e tests for report inventory (#903)\n- from version 20251222.01\n * Revert \"Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)\" (#902)\n- from version 20251222.00\n * Bump golang to the new version (#900)\n- from version 20251218.00\n * add new CODEOWNERS (#901)\n- from version 20251217.00\n * Bump cloud.google.com/go/longrunning from 0.6.3 to 0.7.0 (#882)\n- Bump the golang compiler version to 1.24.5\n- Update to version 20251202.00\n * Revert \"Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)\" (#893)\n- Update to version 20251201.00\n * Revert \"Bump github.com/containerd/containerd (#890)\" (#892)\n- Update to version 20251126.00\n * Bump github.com/containerd/containerd (#890)\n * Bump github.com/spdx/tools-golang from 0.5.3 to 0.5.5 (#887)\n- Update to version 20251028.00\n * Bump go.opentelemetry.io/otel/sdk/metric from 1.35.0 to 1.38.0 (#886)\n * Bump github.com/tidwall/pretty from 1.2.0 to 1.2.1 (#880)\n- from version 20251023.02\n * Create multiple_os.yaml (#883)\n- from version 20251023.00\n * Bump github.com/docker/go-connections from 0.4.0 to 0.6.0 (#877)\n * Add test runner for e2e tests (#876)\n- Update to version 20250925.00\n * Bump cloud.google.com/go/auth/oauth2adapt from 0.2.7 to 0.2.8 (#870)\n * Bump google.golang.org/protobuf from 1.36.6 to 1.36.9 (#874)\n * Bump go.opentelemetry.io/otel from 1.35.0 to 1.38.0 (#872)\n * Bump github.com/golang/glog from 1.2.4 to 1.2.5 (#830)\n- Update to version 20250902.01\n * Bump github.com/googleapis/enterprise-certificate-proxy (#829)\n- from version 20250902.00\n * update github.com/go-jose/go-jose/v4 (#869)\n * Upgrade scalibr and other deps (#866)\n- from version 20250901.00\n * Fix possibility of path traversal for zip and tar archival (#868)\n- from version 20250825.00\n * set CODEOWNERS file as required by org (#863)\n- from version 20250819.00\n * Fix/rhel10 build centos image (#860)\n- from version 20250814.00\n * Fix/rhel10 build image (#859)\n- from version 20250813.00\n * Fix: Add RHEL 10 support to RPM startup script (#858)\n- from version 20250811.00\n * Remove old/sles-15-sp4-sap as image is deprecated (#857)\n- Update to version 20250806.00\n * Fixed JSON identifier for the universe domain (#855)\n- from version 20250729.00\n * Bump github.com/google/s2a-go from 0.1.8 to 0.1.9 (#828)\n- from version 20250725.02\n * Update utils.go (#854)\n * Upgrade golang.org/x/oauth2 package to the latest. (#853)\n * Bump golang.org/x/time from 0.9.0 to 0.12.0 (#839)\n- from version 20250725.01\n * Bump golang.org/x/oauth2 (#848)\n * Port fix for debian 11 to goo package manager. (#852)\n- from version 20250725.00\n * Update Golang version in common.sh and skip backports\n repo for debian 11 (#850)\n- from version 20250723.01\n * Add workflows to build package for el10 (#849)\n- from version 20250721.00\n * Make OS Config agent TPC aware (#846)\n- from version 20250718.00\n * Create workflows for new Debian 13. (#847)\n- Update to version 20250703.00\n * Fix sles images (#844)\n- from version 20250702.00\n * Remove rhel-sap 8-4 add rhel-sap 8-10 (#843)\n- from version 20250701.00\n * Bump the go_modules group across 1 directory with 2 updates (#840)\n- Update to version 20250606.00\n * Change base docker images Google\u0027s official base images. (#838)\n- Update to version 20250523.01\n * Add a simple no-op OS policy for user testing (#837)\n- from version 20250523.00\n * Introduce scalibr inventory extractor for dpkg/rpm/cos\n os/filesystem extractors (linux) (#834)\n * Trace GetInstalledPackages memory levels (#835)\n- from version 20250520.00\n- Update to version 20250513.00\n * Fix rpm extractor, handle (none) value correctly. (#833)\n- from version 20250512.01\n * Bump github.com/envoyproxy/go-control-plane from 0.13.1 to 0.13.4 (#816)\n- from version 20250512.00\n * Bump golang.org/x/net from 0.39.0 to 0.40.0 (#819)\n- from version 20250508.01\n * cosmetic refactoring to osinfo package (#826)\n- from version 20250508.00\n * Refactor /inventory with dependency injection (#825)\n * Add debian, ubuntu (InstalledDebPackages) snapshots (#821)\n * cover packages_linux.go file with tests (#824)\n * Add debian (10,11,12) GetPackageUpdates output snapshots (#822)\n- from version 20250507.00\n * Add InstalledRPMPackages snapshot tests (#823)\n- from version 20250506.02\n * Yum tests: simplify initialization of exit errors (#820)\n- from version 20250506.01\n * Improve test coverage for gem package manager (#818)\n- from version 20250506.00\n * after go/x/crypto update 0.32.0 -\u003e 0.37.0 (#817)\n- from version 20250505.01\n * Improve packages package coverage (#814)\n * Bump golang.org/x/net from 0.34.0 to 0.39.0 (#807)\n- from version 20250505.00\n * Bump golang.org/x/crypto from 0.32.0 to 0.37.0 (#806)\n- from version 20250430.00\n * Snapshot YumUpdates (GetPackageUpdates) output (#813)\n- from version 20250428.00\n * Snapshot ZypperPatches, ZypperUpdates (GetPackageUpdates) output\n for sles 12, 15 testdata (#812)\n- from version 20250423.00\n * Introduce MatchSnapshot large test results matcher function, snapshot\n apt-deb GetPackageUpdates (#811)\n- from version 20250416.02\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1136",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21210-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1210938",
"url": "https://bugzilla.suse.com/1210938"
},
{
"category": "self",
"summary": "SUSE Bug 1251453",
"url": "https://bugzilla.suse.com/1251453"
},
{
"category": "self",
"summary": "SUSE Bug 1251704",
"url": "https://bugzilla.suse.com/1251704"
},
{
"category": "self",
"summary": "SUSE Bug 1260264",
"url": "https://bugzilla.suse.com/1260264"
},
{
"category": "self",
"summary": "SUSE Bug 1262926",
"url": "https://bugzilla.suse.com/1262926"
},
{
"category": "self",
"summary": "SUSE Bug 1264923",
"url": "https://bugzilla.suse.com/1264923"
},
{
"category": "self",
"summary": "SUSE Bug 1265762",
"url": "https://bugzilla.suse.com/1265762"
},
{
"category": "self",
"summary": "SUSE Bug 1266171",
"url": "https://bugzilla.suse.com/1266171"
},
{
"category": "self",
"summary": "SUSE Bug 1266603",
"url": "https://bugzilla.suse.com/1266603"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-45288 page",
"url": "https://www.suse.com/security/cve/CVE-2023-45288/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22868 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22868/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-47911 page",
"url": "https://www.suse.com/security/cve/CVE-2025-47911/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-58190 page",
"url": "https://www.suse.com/security/cve/CVE-2025-58190/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33186 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33814 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34986 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39821 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39827 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39827/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39828 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39829 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39830 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39831 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39832 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39833 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39834 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39835 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41506 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42508 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42508/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46595 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46597 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46598 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46598/"
}
],
"title": "Security update for google-osconfig-agent",
"tracking": {
"current_release_date": "2026-07-02T09:47:31Z",
"generator": {
"date": "2026-07-02T09:47:31Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21210-1",
"initial_release_date": "2026-07-02T09:47:31Z",
"revision_history": [
{
"date": "2026-07-02T09:47:31Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"product": {
"name": "google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"product_id": "google-osconfig-agent-20260615.01-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"product": {
"name": "google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"product_id": "google-osconfig-agent-20260615.01-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "google-osconfig-agent-20260615.01-160000.1.1.x86_64",
"product": {
"name": "google-osconfig-agent-20260615.01-160000.1.1.x86_64",
"product_id": "google-osconfig-agent-20260615.01-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "google-osconfig-agent-20260615.01-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64"
},
"product_reference": "google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "google-osconfig-agent-20260615.01-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le"
},
"product_reference": "google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "google-osconfig-agent-20260615.01-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
},
"product_reference": "google-osconfig-agent-20260615.01-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-45288",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-45288"
}
],
"notes": [
{
"category": "general",
"text": "An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request\u0027s headers exceed MaxHeaderBytes, no memory is allocated to store the excess headers, but they are still parsed. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send. The fix sets a limit on the amount of excess header frames we will process before closing a connection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-45288",
"url": "https://www.suse.com/security/cve/CVE-2023-45288"
},
{
"category": "external",
"summary": "SUSE Bug 1221400 for CVE-2023-45288",
"url": "https://bugzilla.suse.com/1221400"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "moderate"
}
],
"title": "CVE-2023-45288"
},
{
"cve": "CVE-2025-22868",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22868"
}
],
"notes": [
{
"category": "general",
"text": "An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22868",
"url": "https://www.suse.com/security/cve/CVE-2025-22868"
},
{
"category": "external",
"summary": "SUSE Bug 1239185 for CVE-2025-22868",
"url": "https://bugzilla.suse.com/1239185"
},
{
"category": "external",
"summary": "SUSE Bug 1239186 for CVE-2025-22868",
"url": "https://bugzilla.suse.com/1239186"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2025-22868"
},
{
"cve": "CVE-2025-47911",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-47911"
}
],
"notes": [
{
"category": "general",
"text": "The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-47911",
"url": "https://www.suse.com/security/cve/CVE-2025-47911"
},
{
"category": "external",
"summary": "SUSE Bug 1251308 for CVE-2025-47911",
"url": "https://bugzilla.suse.com/1251308"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "moderate"
}
],
"title": "CVE-2025-47911"
},
{
"cve": "CVE-2025-58190",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-58190"
}
],
"notes": [
{
"category": "general",
"text": "The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service (DoS) if an attacker provides specially crafted HTML content.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-58190",
"url": "https://www.suse.com/security/cve/CVE-2025-58190"
},
{
"category": "external",
"summary": "SUSE Bug 1251309 for CVE-2025-58190",
"url": "https://bugzilla.suse.com/1251309"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "moderate"
}
],
"title": "CVE-2025-58190"
},
{
"cve": "CVE-2026-33186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33186"
}
],
"notes": [
{
"category": "general",
"text": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, \"deny\" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback \"allow\" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific \"deny\" rules for canonical paths but allows other requests by default (a fallback \"allow\" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33186",
"url": "https://www.suse.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "SUSE Bug 1260085 for CVE-2026-33186",
"url": "https://bugzilla.suse.com/1260085"
},
{
"category": "external",
"summary": "SUSE Bug 1268676 for CVE-2026-33186",
"url": "https://bugzilla.suse.com/1268676"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-33186"
},
{
"cve": "CVE-2026-33814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33814"
}
],
"notes": [
{
"category": "general",
"text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33814",
"url": "https://www.suse.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "SUSE Bug 1264506 for CVE-2026-33814",
"url": "https://bugzilla.suse.com/1264506"
},
{
"category": "external",
"summary": "SUSE Bug 1268758 for CVE-2026-33814",
"url": "https://bugzilla.suse.com/1268758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-33814"
},
{
"cve": "CVE-2026-34986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34986"
}
],
"notes": [
{
"category": "general",
"text": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34986",
"url": "https://www.suse.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "SUSE Bug 1262805 for CVE-2026-34986",
"url": "https://bugzilla.suse.com/1262805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-34986"
},
{
"cve": "CVE-2026-39821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39821"
}
],
"notes": [
{
"category": "general",
"text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39821",
"url": "https://www.suse.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "SUSE Bug 1266474 for CVE-2026-39821",
"url": "https://bugzilla.suse.com/1266474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39821"
},
{
"cve": "CVE-2026-39827",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39827"
}
],
"notes": [
{
"category": "general",
"text": "An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection\u0027s internal state and released for garbage collection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39827",
"url": "https://www.suse.com/security/cve/CVE-2026-39827"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39827",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39827"
},
{
"cve": "CVE-2026-39828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39828"
}
],
"notes": [
{
"category": "general",
"text": "When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39828",
"url": "https://www.suse.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39828",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39828"
},
{
"cve": "CVE-2026-39829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39829"
}
],
"notes": [
{
"category": "general",
"text": "The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39829",
"url": "https://www.suse.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39829",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39829"
},
{
"cve": "CVE-2026-39830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39830"
}
],
"notes": [
{
"category": "general",
"text": "A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection\u0027s read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39830",
"url": "https://www.suse.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39830",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39830"
},
{
"cve": "CVE-2026-39831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39831"
}
],
"notes": [
{
"category": "general",
"text": "The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a \"no-touch-required\" extension in Permissions.Extensions from PublicKeyCallback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39831",
"url": "https://www.suse.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39831",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39831"
},
{
"cve": "CVE-2026-39832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39832"
}
],
"notes": [
{
"category": "general",
"text": "When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39832",
"url": "https://www.suse.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39832",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39832"
},
{
"cve": "CVE-2026-39833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39833"
}
],
"notes": [
{
"category": "general",
"text": "The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported constraints are requested.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39833",
"url": "https://www.suse.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39833",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39833"
},
{
"cve": "CVE-2026-39834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39834"
}
],
"notes": [
{
"category": "general",
"text": "When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39834",
"url": "https://www.suse.com/security/cve/CVE-2026-39834"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39834",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39834"
},
{
"cve": "CVE-2026-39835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39835"
}
],
"notes": [
{
"category": "general",
"text": "SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39835",
"url": "https://www.suse.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39835",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39835"
},
{
"cve": "CVE-2026-41506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41506"
}
],
"notes": [
{
"category": "general",
"text": "go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. This issue has been patched in versions 5.18.0 and 6.0.0-alpha.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41506",
"url": "https://www.suse.com/security/cve/CVE-2026-41506"
},
{
"category": "external",
"summary": "SUSE Bug 1264854 for CVE-2026-41506",
"url": "https://bugzilla.suse.com/1264854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "moderate"
}
],
"title": "CVE-2026-41506"
},
{
"cve": "CVE-2026-42508",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42508"
}
],
"notes": [
{
"category": "general",
"text": "Previously, a revoked \u0027SignatureKey\u0027 belonging to a CA was not correctly checked for revocation. Now, both the \u0027key\u0027 and \u0027key.SignatureKey\u0027 are checked for @revoked.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42508",
"url": "https://www.suse.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-42508",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-42508"
},
{
"cve": "CVE-2026-46595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46595"
}
],
"notes": [
{
"category": "general",
"text": "Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46595",
"url": "https://www.suse.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46595",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-46595"
},
{
"cve": "CVE-2026-46597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46597"
}
],
"notes": [
{
"category": "general",
"text": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46597",
"url": "https://www.suse.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46597",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-46597"
},
{
"cve": "CVE-2026-46598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46598"
}
],
"notes": [
{
"category": "general",
"text": "For certain crafted inputs, a \u0027ed25519.PrivateKey\u0027 was created by casting malformed wire bytes, leading to a panic when used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46598",
"url": "https://www.suse.com/security/cve/CVE-2026-46598"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46598",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.aarch64",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.ppc64le",
"openSUSE Leap 16.0:google-osconfig-agent-20260615.01-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-46598"
}
]
}
OPENSUSE-SU-2026:21213-1
Vulnerability from csaf_opensuse - Published: 2026-07-02 09:47 - Updated: 2026-07-02 09:47Summary
Security update for containerd
Severity
Important
Notes
Title of the patch: Security update for containerd
Description of the patch: This update for containerd fixes the following issues
Update to 1.7.33:
- CVE-2024-25621: overly broad default permission vulnerability (bsc#1253126).
- CVE-2025-64329: goroutine leaks can lead to memory exhaustion on the host (bsc#1253132).
- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-
header (bsc#1260296).
- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE
(bsc#1265794).
- CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing
encrypted key can lead to a denial of service (bsc#1262948).
- CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service
(bsc#1262266).
- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation
bypass and privilege escalation (bsc#1266640).
- CVE-2026-46680: containerd user ID handling bypass allows runAsNonRoot evasion (bsc#1268355).
- CVE-2026-47262: Denial of Service (DoS) condition via a maliciously crafted image (bsc#1268441).
- CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).
Changes for containerd:
* https://github.com/containerd/containerd/releases/tag/v1.7.33
* https://github.com/containerd/containerd/releases/tag/v1.7.32
* https://github.com/containerd/containerd/releases/tag/v1.7.31
* https://github.com/containerd/containerd/releases/tag/v1.7.30
* https://github.com/containerd/containerd/releases/tag/v1.7.29
* https://github.com/containerd/containerd/releases/tag/v1.7.28
Patchnames: openSUSE-Leap-16.0-1139
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.3 (High)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.1 (Medium)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
important
References
44 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for containerd",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for containerd fixes the following issues\n\nUpdate to 1.7.33:\n\n- CVE-2024-25621: overly broad default permission vulnerability (bsc#1253126).\n- CVE-2025-64329: goroutine leaks can lead to memory exhaustion on the host (bsc#1253132).\n- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-\n header (bsc#1260296).\n- CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE\n (bsc#1265794).\n- CVE-2026-34986: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: crafted JWE input with a missing\n encrypted key can lead to a denial of service (bsc#1262948).\n- CVE-2026-35469: github.com/moby/spdystream: memory amplification in SPDY frame parsing leads to denial of service\n (bsc#1262266).\n- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation\n bypass and privilege escalation (bsc#1266640).\n- CVE-2026-46680: containerd user ID handling bypass allows runAsNonRoot evasion (bsc#1268355).\n- CVE-2026-47262: Denial of Service (DoS) condition via a maliciously crafted image (bsc#1268441).\n- CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430).\n\nChanges for containerd:\n\n * https://github.com/containerd/containerd/releases/tag/v1.7.33\n * https://github.com/containerd/containerd/releases/tag/v1.7.32\n * https://github.com/containerd/containerd/releases/tag/v1.7.31\n * https://github.com/containerd/containerd/releases/tag/v1.7.30\n * https://github.com/containerd/containerd/releases/tag/v1.7.29\n * https://github.com/containerd/containerd/releases/tag/v1.7.28\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-1139",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21213-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1253126",
"url": "https://bugzilla.suse.com/1253126"
},
{
"category": "self",
"summary": "SUSE Bug 1253132",
"url": "https://bugzilla.suse.com/1253132"
},
{
"category": "self",
"summary": "SUSE Bug 1260296",
"url": "https://bugzilla.suse.com/1260296"
},
{
"category": "self",
"summary": "SUSE Bug 1262266",
"url": "https://bugzilla.suse.com/1262266"
},
{
"category": "self",
"summary": "SUSE Bug 1262948",
"url": "https://bugzilla.suse.com/1262948"
},
{
"category": "self",
"summary": "SUSE Bug 1265794",
"url": "https://bugzilla.suse.com/1265794"
},
{
"category": "self",
"summary": "SUSE Bug 1266640",
"url": "https://bugzilla.suse.com/1266640"
},
{
"category": "self",
"summary": "SUSE Bug 1268355",
"url": "https://bugzilla.suse.com/1268355"
},
{
"category": "self",
"summary": "SUSE Bug 1268430",
"url": "https://bugzilla.suse.com/1268430"
},
{
"category": "self",
"summary": "SUSE Bug 1268441",
"url": "https://bugzilla.suse.com/1268441"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-25621 page",
"url": "https://www.suse.com/security/cve/CVE-2024-25621/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-64329 page",
"url": "https://www.suse.com/security/cve/CVE-2025-64329/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33186 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33814 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33814/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34986 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34986/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-35469 page",
"url": "https://www.suse.com/security/cve/CVE-2026-35469/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39821 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46680 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-47262 page",
"url": "https://www.suse.com/security/cve/CVE-2026-47262/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-53488 page",
"url": "https://www.suse.com/security/cve/CVE-2026-53488/"
}
],
"title": "Security update for containerd",
"tracking": {
"current_release_date": "2026-07-02T09:47:31Z",
"generator": {
"date": "2026-07-02T09:47:31Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21213-1",
"initial_release_date": "2026-07-02T09:47:31Z",
"revision_history": [
{
"date": "2026-07-02T09:47:31Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "containerd-1.7.33-160000.1.1.aarch64",
"product": {
"name": "containerd-1.7.33-160000.1.1.aarch64",
"product_id": "containerd-1.7.33-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "containerd-ctr-1.7.33-160000.1.1.aarch64",
"product": {
"name": "containerd-ctr-1.7.33-160000.1.1.aarch64",
"product_id": "containerd-ctr-1.7.33-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "containerd-devel-1.7.33-160000.1.1.noarch",
"product": {
"name": "containerd-devel-1.7.33-160000.1.1.noarch",
"product_id": "containerd-devel-1.7.33-160000.1.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "containerd-1.7.33-160000.1.1.ppc64le",
"product": {
"name": "containerd-1.7.33-160000.1.1.ppc64le",
"product_id": "containerd-1.7.33-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "containerd-ctr-1.7.33-160000.1.1.ppc64le",
"product": {
"name": "containerd-ctr-1.7.33-160000.1.1.ppc64le",
"product_id": "containerd-ctr-1.7.33-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "containerd-1.7.33-160000.1.1.s390x",
"product": {
"name": "containerd-1.7.33-160000.1.1.s390x",
"product_id": "containerd-1.7.33-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "containerd-ctr-1.7.33-160000.1.1.s390x",
"product": {
"name": "containerd-ctr-1.7.33-160000.1.1.s390x",
"product_id": "containerd-ctr-1.7.33-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "containerd-1.7.33-160000.1.1.x86_64",
"product": {
"name": "containerd-1.7.33-160000.1.1.x86_64",
"product_id": "containerd-1.7.33-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "containerd-ctr-1.7.33-160000.1.1.x86_64",
"product": {
"name": "containerd-ctr-1.7.33-160000.1.1.x86_64",
"product_id": "containerd-ctr-1.7.33-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "containerd-1.7.33-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64"
},
"product_reference": "containerd-1.7.33-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerd-1.7.33-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le"
},
"product_reference": "containerd-1.7.33-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerd-1.7.33-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x"
},
"product_reference": "containerd-1.7.33-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerd-1.7.33-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64"
},
"product_reference": "containerd-1.7.33-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerd-ctr-1.7.33-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64"
},
"product_reference": "containerd-ctr-1.7.33-160000.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerd-ctr-1.7.33-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le"
},
"product_reference": "containerd-ctr-1.7.33-160000.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerd-ctr-1.7.33-160000.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x"
},
"product_reference": "containerd-ctr-1.7.33-160000.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerd-ctr-1.7.33-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64"
},
"product_reference": "containerd-ctr-1.7.33-160000.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "containerd-devel-1.7.33-160000.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
},
"product_reference": "containerd-devel-1.7.33-160000.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25621",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-25621"
}
],
"notes": [
{
"category": "general",
"text": "containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system administrator permissions so the host can manually chmod the directories to not have group or world accessible permissions, or to run containerd in rootless mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-25621",
"url": "https://www.suse.com/security/cve/CVE-2024-25621"
},
{
"category": "external",
"summary": "SUSE Bug 1253126 for CVE-2024-25621",
"url": "https://bugzilla.suse.com/1253126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2024-25621"
},
{
"cve": "CVE-2025-64329",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-64329"
}
],
"notes": [
{
"category": "general",
"text": "containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. To workaround this vulnerability, users can set up an admission controller to control accesses to pods/attach resources.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-64329",
"url": "https://www.suse.com/security/cve/CVE-2025-64329"
},
{
"category": "external",
"summary": "SUSE Bug 1253132 for CVE-2025-64329",
"url": "https://bugzilla.suse.com/1253132"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "moderate"
}
],
"title": "CVE-2025-64329"
},
{
"cve": "CVE-2026-33186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33186"
}
],
"notes": [
{
"category": "general",
"text": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, \"deny\" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback \"allow\" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific \"deny\" rules for canonical paths but allows other requests by default (a fallback \"allow\" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33186",
"url": "https://www.suse.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "SUSE Bug 1260085 for CVE-2026-33186",
"url": "https://bugzilla.suse.com/1260085"
},
{
"category": "external",
"summary": "SUSE Bug 1268676 for CVE-2026-33186",
"url": "https://bugzilla.suse.com/1268676"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-33186"
},
{
"cve": "CVE-2026-33814",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33814"
}
],
"notes": [
{
"category": "general",
"text": "When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33814",
"url": "https://www.suse.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "SUSE Bug 1264506 for CVE-2026-33814",
"url": "https://bugzilla.suse.com/1264506"
},
{
"category": "external",
"summary": "SUSE Bug 1268758 for CVE-2026-33814",
"url": "https://bugzilla.suse.com/1268758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-33814"
},
{
"cve": "CVE-2026-34986",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34986"
}
],
"notes": [
{
"category": "general",
"text": "Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34986",
"url": "https://www.suse.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "SUSE Bug 1262805 for CVE-2026-34986",
"url": "https://bugzilla.suse.com/1262805"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-34986"
},
{
"cve": "CVE-2026-35469",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-35469"
}
],
"notes": [
{
"category": "general",
"text": "spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count in parseHeaderValueBlock, and individual header field sizes - all read as 32-bit integers and used directly as allocation sizes with no bounds checking. Because SPDY header blocks are zlib-compressed, a small on-the-wire payload can decompress into large attacker-controlled values. A remote peer that can send SPDY frames to a service using spdystream can exhaust process memory and cause an out-of-memory crash with a single crafted control frame. This issue has been fixed in version 0.5.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-35469",
"url": "https://www.suse.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "SUSE Bug 1262264 for CVE-2026-35469",
"url": "https://bugzilla.suse.com/1262264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "moderate"
}
],
"title": "CVE-2026-35469"
},
{
"cve": "CVE-2026-39821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39821"
}
],
"notes": [
{
"category": "general",
"text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39821",
"url": "https://www.suse.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "SUSE Bug 1266474 for CVE-2026-39821",
"url": "https://bugzilla.suse.com/1266474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-39821"
},
{
"cve": "CVE-2026-46680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46680"
}
],
"notes": [
{
"category": "general",
"text": "containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted image provides an /etc/passwd file mapping this large numeric string to root, the container ultimately runs as root (UID 0). This allows the Kubernetes runAsNonRoot restriction to be bypassed, causing unexpected behavior for environments that require containers to run as a non-root user. This issue has been fixed in versions 1.7.32, 2.0.9, 2.2.4 and 2.3.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46680",
"url": "https://www.suse.com/security/cve/CVE-2026-46680"
},
{
"category": "external",
"summary": "SUSE Bug 1268355 for CVE-2026-46680",
"url": "https://bugzilla.suse.com/1268355"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-46680"
},
{
"cve": "CVE-2026-47262",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-47262"
}
],
"notes": [
{
"category": "general",
"text": "containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS) condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can disrupt clients such as the Docker Engine or Kubernetes control-plane components. This issue has been fixed in versions 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-47262",
"url": "https://www.suse.com/security/cve/CVE-2026-47262"
},
{
"category": "external",
"summary": "SUSE Bug 1268405 for CVE-2026-47262",
"url": "https://bugzilla.suse.com/1268405"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "moderate"
}
],
"title": "CVE-2026-47262"
},
{
"cve": "CVE-2026-53488",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-53488"
}
],
"notes": [
{
"category": "general",
"text": "containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host, via a plugin that consumes container labels for some operations. This issue has been fixed in versions 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-53488",
"url": "https://www.suse.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "SUSE Bug 1268400 for CVE-2026-53488",
"url": "https://bugzilla.suse.com/1268400"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.aarch64",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.ppc64le",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.s390x",
"openSUSE Leap 16.0:containerd-ctr-1.7.33-160000.1.1.x86_64",
"openSUSE Leap 16.0:containerd-devel-1.7.33-160000.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-07-02T09:47:31Z",
"details": "important"
}
],
"title": "CVE-2026-53488"
}
]
}
RHSA-2026:10125
Vulnerability from csaf_redhat - Published: 2026-04-23 12:15 - Updated: 2026-07-23 09:53Summary
Red Hat Security Advisory: RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release
Severity
Important
Notes
Topic: The 1.3.4 release of Red Hat Trusted Artifact Signer OpenShift Operator.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3
Details: The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod's filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.
9.6 (Critical)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
71 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.3.4 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10125",
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33211",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10125.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-07-23T09:53:14+00:00",
"generator": {
"date": "2026-07-23T09:53:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:10125",
"initial_release_date": "2026-04-23T12:15:28+00:00",
"revision_history": [
{
"date": "2026-04-23T12:15:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-23T09:53:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.3",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64",
"product": {
"name": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64",
"product_id": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64",
"product_identification_helper": {
"purl": "pkg:oci/client-server-rhel9@sha256%3A9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72?arch=amd64\u0026repository_url=registry.redhat.io/rhtas\u0026tag=1776339099"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
},
"product_reference": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33211",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-24T00:02:20.093480+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450554"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Tekton Pipelines, specifically in the Tekton Pipelines git resolver. A tenant with permissions to create ResolutionRequests can exploit a path traversal vulnerability via the `pathInRepo` parameter. This allows the tenant to read arbitrary files from the resolver pod\u0027s filesystem, leading to information disclosure, including sensitive ServiceAccount tokens. The contents of these files are returned in a base64-encoded format.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to have the permission to create ResolutionRequests (e.g., by creating TaskRuns or PipelineRuns that use the git resolver) within at least one specific namespace, limiting the exposure of this issue to authenticated users. Also, an attacker can read any file readable by the resolver pod process, including cluster secrets, allowing an escalation of privileges from namespace-scoped access to cluster-wide access. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33211"
},
{
"category": "external",
"summary": "RHBZ#2450554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450554"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33211",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33211"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33211"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c",
"url": "https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5",
"url": "https://github.com/tektoncd/pipeline/commit/318006c4e3a5"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd",
"url": "https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae",
"url": "https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e",
"url": "https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db",
"url": "https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78",
"url": "https://github.com/tektoncd/pipeline/commit/ec7755031a183b345cf9e64bea0e0505c1b9cb78"
},
{
"category": "external",
"summary": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c",
"url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c"
}
],
"release_date": "2026-03-23T23:55:54.089000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, restrict the creation of ResolutionRequests to trusted users and service accounts. Implement strict Role-Based Access Control (RBAC) policies to limit which tenants can create TaskRuns or PipelineRuns that utilize the Tekton Pipelines git resolver. This reduces the exposure by preventing unauthorized access to the resolver pod\u0027s filesystem.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Tekton Pipelines: github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure via path traversal in git resolver"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:15:28+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10125"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:10130
Vulnerability from csaf_redhat - Published: 2026-04-23 12:17 - Updated: 2026-07-23 09:53Summary
Red Hat Security Advisory: RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release
Severity
Important
Notes
Topic: The 1.3.4 release of Red Hat Trusted Artifact Signer OpenShift Operator.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3
Details: The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
No description is available for this CVE.
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64 | — |
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64 | — |
Workaround
|
Threats
Impact
Important
References
21 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.3.4 release of Red Hat Trusted Artifact Signer OpenShift Operator.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10130",
"url": "https://access.redhat.com/errata/RHSA-2026:10130"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4427",
"url": "https://access.redhat.com/security/cve/CVE-2026-4427"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10130.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release",
"tracking": {
"current_release_date": "2026-07-23T09:53:20+00:00",
"generator": {
"date": "2026-07-23T09:53:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:10130",
"initial_release_date": "2026-04-23T12:17:43+00:00",
"revision_history": [
{
"date": "2026-04-23T12:17:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-23T09:53:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.3",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"product": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"product_id": "registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cosign-rhel9@sha256%3Ab7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78?arch=amd64\u0026repository_url=registry.redhat.io/rhtas\u0026tag=1776329867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"product": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"product_id": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fetch-tsa-certs-rhel9@sha256%3Aaebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927?arch=amd64\u0026repository_url=registry.redhat.io/rhtas\u0026tag=1776242867"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"product": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"product_id": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/gitsign-rhel9@sha256%3A576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6?arch=amd64\u0026repository_url=registry.redhat.io/rhtas\u0026tag=1776326944"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"product": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"product_id": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rekor-cli-rhel9@sha256%3Acb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296?arch=amd64\u0026repository_url=registry.redhat.io/rhtas\u0026tag=1776243545"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64",
"product": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64",
"product_id": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64",
"product_identification_helper": {
"purl": "pkg:oci/updatetree-rhel9@sha256%3A49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99?arch=amd64\u0026repository_url=registry.redhat.io/rhtas\u0026tag=1776243434"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64"
},
"product_reference": "registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64"
},
"product_reference": "registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64"
},
"product_reference": "registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64"
},
"product_reference": "registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64 as a component of Red Hat Trusted Artifact Signer 1.3",
"product_id": "Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
},
"product_reference": "registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4427",
"discovery_date": "2026-03-18T14:02:19.414820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64"
]
}
],
"notes": [
{
"category": "description",
"text": "No description is available for this CVE.",
"title": "Vulnerability description"
},
{
"category": "other",
"text": "This CVE has been marked as Rejected by the assigning CNA.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4427"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4427",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4427"
}
],
"release_date": "2026-03-18T13:00:31+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:17:43+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10130"
}
],
"title": "github.com/jackc/pgproto3: pgproto3: Denial of Service via negative field length in DataRow message"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:17:43+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10130"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T12:17:43+00:00",
"details": "Red Hat Trusted Artifact Signer simplifies cryptographic signing and verifying of software artifacts such as container images, binaries and source code changes. It is a self-managed on-premise deployment of the Sigstore project available at https://sigstore.dev\n\nPlatform Engineers, Software Developers and Security Professionals may use RHTAS to ensure the integrity, transparency and assurance of their organization\u0027s software supply chain.\n\nFor details on using the operator, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.3/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10130"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/cosign-rhel9@sha256:b7599fcedc9a0777b71b048f7a5ca39371484483d25ddf33c4b4949a66d7eb78_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/fetch-tsa-certs-rhel9@sha256:aebd17387291c5044ca5f6fd38032fbb0039552306a1602b2bc92edecd904927_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/gitsign-rhel9@sha256:576459d1b82dc036d46c167a82d637e7924300668bffd8e3eebc0e9b349157c6_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/rekor-cli-rhel9@sha256:cb4533fbe1dbda3a253719cf1bea345e91e1eac6f0ba4665ee66016d02e0e296_amd64",
"Red Hat Trusted Artifact Signer 1.3:registry.redhat.io/rhtas/updatetree-rhel9@sha256:49d1968ed236c78da3f355f228f24d0048ac11c83bea82025a83630c9bc39c99_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:10135
Vulnerability from csaf_redhat - Published: 2026-04-24 07:46 - Updated: 2026-07-23 09:04Summary
Red Hat Security Advisory: buildah security update
Severity
Important
Notes
Topic: An update for buildah is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images.
Security Fix(es):
* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for buildah is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. \n\nSecurity Fix(es):\n\n* github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object (CVE-2026-34986)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10135",
"url": "https://access.redhat.com/errata/RHSA-2026:10135"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10135.json"
}
],
"title": "Red Hat Security Advisory: buildah security update",
"tracking": {
"current_release_date": "2026-07-23T09:04:41+00:00",
"generator": {
"date": "2026-07-23T09:04:41+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:10135",
"initial_release_date": "2026-04-24T07:46:55+00:00",
"revision_history": [
{
"date": "2026-04-24T07:46:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-04-24T07:46:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-23T09:04:41+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "buildah-2:1.41.8-3.el9_7.src",
"product": {
"name": "buildah-2:1.41.8-3.el9_7.src",
"product_id": "buildah-2:1.41.8-3.el9_7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.41.8-3.el9_7?arch=src\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "buildah-2:1.41.8-3.el9_7.aarch64",
"product": {
"name": "buildah-2:1.41.8-3.el9_7.aarch64",
"product_id": "buildah-2:1.41.8-3.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.41.8-3.el9_7?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-2:1.41.8-3.el9_7.aarch64",
"product": {
"name": "buildah-tests-2:1.41.8-3.el9_7.aarch64",
"product_id": "buildah-tests-2:1.41.8-3.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests@1.41.8-3.el9_7?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-debugsource-2:1.41.8-3.el9_7.aarch64",
"product": {
"name": "buildah-debugsource-2:1.41.8-3.el9_7.aarch64",
"product_id": "buildah-debugsource-2:1.41.8-3.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debugsource@1.41.8-3.el9_7?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.aarch64",
"product": {
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.aarch64",
"product_id": "buildah-debuginfo-2:1.41.8-3.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debuginfo@1.41.8-3.el9_7?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64",
"product": {
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64",
"product_id": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.41.8-3.el9_7?arch=aarch64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "buildah-2:1.41.8-3.el9_7.ppc64le",
"product": {
"name": "buildah-2:1.41.8-3.el9_7.ppc64le",
"product_id": "buildah-2:1.41.8-3.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.41.8-3.el9_7?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-2:1.41.8-3.el9_7.ppc64le",
"product": {
"name": "buildah-tests-2:1.41.8-3.el9_7.ppc64le",
"product_id": "buildah-tests-2:1.41.8-3.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests@1.41.8-3.el9_7?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-debugsource-2:1.41.8-3.el9_7.ppc64le",
"product": {
"name": "buildah-debugsource-2:1.41.8-3.el9_7.ppc64le",
"product_id": "buildah-debugsource-2:1.41.8-3.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debugsource@1.41.8-3.el9_7?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"product": {
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"product_id": "buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debuginfo@1.41.8-3.el9_7?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"product": {
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"product_id": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.41.8-3.el9_7?arch=ppc64le\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "buildah-2:1.41.8-3.el9_7.x86_64",
"product": {
"name": "buildah-2:1.41.8-3.el9_7.x86_64",
"product_id": "buildah-2:1.41.8-3.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.41.8-3.el9_7?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-2:1.41.8-3.el9_7.x86_64",
"product": {
"name": "buildah-tests-2:1.41.8-3.el9_7.x86_64",
"product_id": "buildah-tests-2:1.41.8-3.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests@1.41.8-3.el9_7?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-debugsource-2:1.41.8-3.el9_7.x86_64",
"product": {
"name": "buildah-debugsource-2:1.41.8-3.el9_7.x86_64",
"product_id": "buildah-debugsource-2:1.41.8-3.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debugsource@1.41.8-3.el9_7?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.x86_64",
"product": {
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.x86_64",
"product_id": "buildah-debuginfo-2:1.41.8-3.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debuginfo@1.41.8-3.el9_7?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64",
"product": {
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64",
"product_id": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.41.8-3.el9_7?arch=x86_64\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "buildah-2:1.41.8-3.el9_7.s390x",
"product": {
"name": "buildah-2:1.41.8-3.el9_7.s390x",
"product_id": "buildah-2:1.41.8-3.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah@1.41.8-3.el9_7?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-2:1.41.8-3.el9_7.s390x",
"product": {
"name": "buildah-tests-2:1.41.8-3.el9_7.s390x",
"product_id": "buildah-tests-2:1.41.8-3.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests@1.41.8-3.el9_7?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-debugsource-2:1.41.8-3.el9_7.s390x",
"product": {
"name": "buildah-debugsource-2:1.41.8-3.el9_7.s390x",
"product_id": "buildah-debugsource-2:1.41.8-3.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debugsource@1.41.8-3.el9_7?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.s390x",
"product": {
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.s390x",
"product_id": "buildah-debuginfo-2:1.41.8-3.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-debuginfo@1.41.8-3.el9_7?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x",
"product": {
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x",
"product_id": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.41.8-3.el9_7?arch=s390x\u0026epoch=2"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-2:1.41.8-3.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.aarch64"
},
"product_reference": "buildah-2:1.41.8-3.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-2:1.41.8-3.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.ppc64le"
},
"product_reference": "buildah-2:1.41.8-3.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-2:1.41.8-3.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.s390x"
},
"product_reference": "buildah-2:1.41.8-3.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-2:1.41.8-3.el9_7.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.src"
},
"product_reference": "buildah-2:1.41.8-3.el9_7.src",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-2:1.41.8-3.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.x86_64"
},
"product_reference": "buildah-2:1.41.8-3.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.aarch64"
},
"product_reference": "buildah-debuginfo-2:1.41.8-3.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le"
},
"product_reference": "buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.s390x"
},
"product_reference": "buildah-debuginfo-2:1.41.8-3.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debuginfo-2:1.41.8-3.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.x86_64"
},
"product_reference": "buildah-debuginfo-2:1.41.8-3.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debugsource-2:1.41.8-3.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.aarch64"
},
"product_reference": "buildah-debugsource-2:1.41.8-3.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debugsource-2:1.41.8-3.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.ppc64le"
},
"product_reference": "buildah-debugsource-2:1.41.8-3.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debugsource-2:1.41.8-3.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.s390x"
},
"product_reference": "buildah-debugsource-2:1.41.8-3.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-debugsource-2:1.41.8-3.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.x86_64"
},
"product_reference": "buildah-debugsource-2:1.41.8-3.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-2:1.41.8-3.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.aarch64"
},
"product_reference": "buildah-tests-2:1.41.8-3.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-2:1.41.8-3.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.ppc64le"
},
"product_reference": "buildah-tests-2:1.41.8-3.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-2:1.41.8-3.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.s390x"
},
"product_reference": "buildah-tests-2:1.41.8-3.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-2:1.41.8-3.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.x86_64"
},
"product_reference": "buildah-tests-2:1.41.8-3.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64"
},
"product_reference": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le"
},
"product_reference": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x"
},
"product_reference": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64"
},
"product_reference": "buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.src",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-24T07:46:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.src",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10135"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.src",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.src",
"AppStream-9.7.0.Z.MAIN:buildah-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-debuginfo-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-debugsource-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-tests-2:1.41.8-3.el9_7.x86_64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.aarch64",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.ppc64le",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.s390x",
"AppStream-9.7.0.Z.MAIN:buildah-tests-debuginfo-2:1.41.8-3.el9_7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
}
]
}
RHSA-2026:10175
Vulnerability from csaf_redhat - Published: 2026-04-23 14:43 - Updated: 2026-07-23 09:53Summary
Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.27.1 Release.
Severity
Important
Notes
Topic: Red Hat OpenShift Dev Spaces 3.27.1 has been released.
Details: Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development.
The 3.27 release is based on Eclipse Che 7.115 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2.
Users still using the v1 standard should migrate as soon as possible.
https://devfile.io/docs/2.2.0/migrating-to-devfile-v2
Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates.
https://access.redhat.com/support/policy/updates/openshift#crw
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Eclipse Jetty. The HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used. An attacker can inject crafted requests to manipulate and trick the parser. This issue can lead to security controls bypass, cache poisoning or unauthorized endpoint access.
7.4 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Spring Boot. This vulnerability, an authentication bypass, occurs when an application endpoint requiring authentication is declared under a specific path already configured for a Health Group additional path. A remote attacker could exploit this to bypass authentication, potentially gaining unauthorized access to sensitive application endpoints. This could lead to information disclosure or unauthorized actions.
8.2 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Moderate
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote unauthenticated client can exploit this vulnerability by sending an incomplete Transport Layer Security (TLS) record, which causes the TLS handshake to stall indefinitely. This can lead to resource exhaustion, such as file descriptors and goroutines, ultimately degrading the availability of all services on the affected entrypoint, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Rollup, a JavaScript module bundler. Insecure file name sanitization in the core engine allows an attacker to control output filenames, potentially through command-line interface (CLI) inputs, manual chunk aliases, or malicious plugins. By using directory traversal sequences (`../`), an attacker can overwrite files anywhere on the host filesystem where the build process has write permissions. This vulnerability can lead to persistent remote code execution (RCE) by overwriting critical system or user configuration files.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Threats
Impact
Important
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote unauthenticated client can exploit a case sensitivity vulnerability in how Traefik processes HTTP/1.1 requests. By using lowercase tokens in the Connection header, an attacker can bypass security protections, leading to the removal of Traefik-managed forwarded identity headers. This could result in information disclosure or misattribution of client requests.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote attacker can exploit this vulnerability by sending fragmented ClientHello packets during the Transport Layer Security (TLS) handshake. This causes Traefik's Server Name Indication (SNI) extraction to fail, leading to a fallback to a default TLS configuration that does not require client certificates. This allows an attacker to bypass mutual TLS (mTLS) authentication, gaining unauthorized access to services that should be protected by client certificate requirements.
8.3 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When using the Knative provider, Traefik incorrectly interpolates user-controlled values into router rule expressions without proper escaping. This vulnerability allows an attacker to inject malicious rule syntax, leading to a host restriction bypass. In multi-tenant environments, this can result in unauthorized traffic being routed to victim services, potentially exposing cross-tenant traffic.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When the `headerField` is configured with a non-canonical HTTP header name, an authenticated attacker can inject a canonical version of that header. This allows the attacker to impersonate any identity to the backend, leading to an authentication bypass. The backend prioritizes the attacker-injected header, overriding Traefik's intended header.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in @fastify/reply-from and @fastify/http-proxy. A remote attacker can exploit this vulnerability by manipulating the Connection header in client requests. This allows the attacker to remove specific headers that the proxy has added for security, routing, or access control purposes. Consequently, an attacker could bypass security mechanisms or gain unauthorized access to resources.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/1.1 chunked transfer encoding extension values. Due to incorrect parsing of quoted strings, this flaw enables request smuggling attacks, potentially allowing an attacker to bypass security controls or access unauthorized information.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty. A remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of CONTINUATION frames. The server's lack of a limit on these frames, coupled with a bypass of size-based mitigations using zero-byte frames, allows an attacker to consume excessive CPU resources. This can render the server unresponsive with minimal bandwidth usage.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Vendor Fix
fix
|
Known not affected
49 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Threats
Impact
Important
A flaw was found in Handlebars. An attacker can exploit this by supplying a crafted Abstract Syntax Tree (AST) object to the `Handlebars.compile()` function. This allows the injection and execution of arbitrary JavaScript code due to improper sanitization of the `value` field in `NumberLiteral` AST nodes. This vulnerability can lead to Remote Code Execution (RCE) on the server.
9.8 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars. A remote attacker can exploit this vulnerability by manipulating the `@partial-block` special variable within the template data context. By overwriting `@partial-block` with a specially crafted Abstract Syntax Tree (AST) through a helper, a subsequent invocation of `{{> @partial-block}}` will compile and execute the malicious AST. This enables arbitrary JavaScript execution on the server, leading to potential compromise of the system.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars.js. A remote attacker can exploit this by submitting a malformed Handlebars template that includes decorator syntax referencing an unregistered decorator. When the application attempts to compile this template without proper error handling, it triggers an unhandled `TypeError`. This error causes the Node.js process to crash, resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars.js. A remote attacker can exploit this vulnerability by providing a specially crafted object within the template context. This crafted object, when processed by a dynamic partial lookup, can bypass security checks and be interpreted as malicious code. This allows the attacker to execute arbitrary commands on the server where Handlebars.js is running.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Handlebars. The Handlebars command-line interface (CLI) precompiler concatenates user-controlled strings, such as template file names and CLI options, directly into the generated JavaScript without proper escaping or sanitization. An attacker capable of influencing these inputs can inject arbitrary JavaScript code. This can lead to arbitrary code execution when the generated JavaScript bundle is loaded in a Node.js environment or a web browser.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
57 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.
9.0 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le | — |
Vendor Fix
fix
|
Known not affected
53 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x | — |
Threats
Impact
Important
References
190 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Dev Spaces 3.27.1 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development.\nThe 3.27 release is based on Eclipse Che 7.115 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2.\nUsers still using the v1 standard should migrate as soon as possible.\nhttps://devfile.io/docs/2.2.0/migrating-to-devfile-v2\nDev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates.\nhttps://access.redhat.com/support/policy/updates/openshift#crw",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:10175",
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.27/html/administration_guide/installing-devspaces",
"url": "https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.27/html/administration_guide/installing-devspaces"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-22731",
"url": "https://access.redhat.com/security/cve/CVE-2026-22731"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-2332",
"url": "https://access.redhat.com/security/cve/CVE-2026-2332"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26999",
"url": "https://access.redhat.com/security/cve/CVE-2026-26999"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27606",
"url": "https://access.redhat.com/security/cve/CVE-2026-27606"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29054",
"url": "https://access.redhat.com/security/cve/CVE-2026-29054"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32305",
"url": "https://access.redhat.com/security/cve/CVE-2026-32305"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32695",
"url": "https://access.redhat.com/security/cve/CVE-2026-32695"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33433",
"url": "https://access.redhat.com/security/cve/CVE-2026-33433"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33805",
"url": "https://access.redhat.com/security/cve/CVE-2026-33805"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33870",
"url": "https://access.redhat.com/security/cve/CVE-2026-33870"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33871",
"url": "https://access.redhat.com/security/cve/CVE-2026-33871"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33937",
"url": "https://access.redhat.com/security/cve/CVE-2026-33937"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33938",
"url": "https://access.redhat.com/security/cve/CVE-2026-33938"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33939",
"url": "https://access.redhat.com/security/cve/CVE-2026-33939"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33940",
"url": "https://access.redhat.com/security/cve/CVE-2026-33940"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33941",
"url": "https://access.redhat.com/security/cve/CVE-2026-33941"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40175",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4926",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10175.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.27.1 Release.",
"tracking": {
"current_release_date": "2026-07-23T09:53:21+00:00",
"generator": {
"date": "2026-07-23T09:53:21+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:10175",
"initial_release_date": "2026-04-23T14:43:48+00:00",
"revision_history": [
{
"date": "2026-04-23T14:43:48+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-23T09:53:21+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Dev Spaces 3.27",
"product": {
"name": "Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_devspaces:3.27::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Dev Spaces"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3Abaccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776744110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3A45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776743204"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718450"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3Ad3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3Ade2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795400"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776774989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3Abf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776716842"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3Ad05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718480"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"product_id": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-operator-bundle@sha256%3A961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776803772"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3A27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776717247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776796445"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3A179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776789889"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3Ae1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776777278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3?arch=amd64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776778243"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3A6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776744110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3A70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776743204"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718450"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795400"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776774989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3Ad0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776716842"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3A1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718480"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3Afb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776717247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776796445"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3Acbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776789889"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3A8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776777278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e?arch=s390x\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776778243"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3Aab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776744110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3A215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776743204"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3A24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718450"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3A7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795400"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776774989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3Ab2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776716842"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3Adcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718480"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3Ae224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776717247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3A88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776796445"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3Aee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776789889"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3A02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776777278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3A17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420?arch=ppc64le\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776778243"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"product": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"product_id": "registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/code-rhel9@sha256%3A56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776744110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"product": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"product_id": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/code-sshd-rhel9@sha256%3Af7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776743204"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"product": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"product_id": "registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/configbump-rhel9@sha256%3Acb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718450"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"product": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"product_id": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dashboard-rhel9@sha256%3A25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"product": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"product_id": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"product_identification_helper": {
"purl": "pkg:oci/imagepuller-rhel9@sha256%3A6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718438"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"product": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"product_id": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jetbrains-ide-rhel9@sha256%3Af72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776795400"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"product": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"product_id": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-redirector-rhel9@sha256%3A4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776774989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"product": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"product_id": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openvsx-rhel9@sha256%3A12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776716842"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"product": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"product_id": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"product_identification_helper": {
"purl": "pkg:oci/devspaces-rhel9-operator@sha256%3Ab725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718480"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"product": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"product_id": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/pluginregistry-rhel9@sha256%3Ae832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776717247"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"product": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"product_id": "registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"product_identification_helper": {
"purl": "pkg:oci/server-rhel9@sha256%3Ad97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776796445"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"product": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"product_id": "registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/traefik-rhel9@sha256%3A34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776718585"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"product_id": "registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-rhel9@sha256%3A44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776789889"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel10@sha256%3Ae6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776777278"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"product": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"product_id": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/udi-base-rhel9@sha256%3Ab65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5?arch=arm64\u0026repository_url=registry.redhat.io/devspaces\u0026tag=1776778243"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
},
"product_reference": "registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64"
},
"product_reference": "registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64"
},
"product_reference": "registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64"
},
"product_reference": "registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64"
},
"product_reference": "registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x"
},
"product_reference": "registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x"
},
"product_reference": "registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
},
"product_reference": "registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64 as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x as a component of Red Hat OpenShift Dev Spaces 3.27",
"product_id": "Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
},
"product_reference": "registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x",
"relates_to_product_reference": "Red Hat OpenShift Dev Spaces 3.27"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"cve": "CVE-2026-2332",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-04-14T12:01:05.768902+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458187"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Jetty. The HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used. An attacker can inject crafted requests to manipulate and trick the parser. This issue can lead to security controls bypass, cache poisoning or unauthorized endpoint access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs to send a crafted payload to a Jetty server that is behind a reverse proxy or load balancer, specifically with a chunk extension that includes an unclosed double quote before the CRLF to trick the parser. This flaw allows an attacker to bypass security controls, cause cache poisoning or gain unauthorized endpoint access. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-2332"
},
{
"category": "external",
"summary": "RHBZ#2458187",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458187"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-2332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2332"
},
{
"category": "external",
"summary": "https://github.com/jetty/jetty.project/security/advisories/GHSA-355h-qmc2-wpwf",
"url": "https://github.com/jetty/jetty.project/security/advisories/GHSA-355h-qmc2-wpwf"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/issues/89",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/issues/89"
}
],
"release_date": "2026-04-14T10:59:10.193000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.eclipse.jetty/jetty-http: HTTP request smuggling via chunked extension quoted-string parsing"
},
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-4926",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-03-26T20:03:28.427630+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451867"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in path-to-regexp. A remote attacker could exploit this vulnerability by providing specially crafted input that generates a regular expression with multiple sequential optional groups. This leads to an exponential growth in the generated regular expression, causing a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `path-to-regexp` that can lead to a Denial of Service. The vulnerability occurs when specially crafted input containing multiple sequential optional groups is used to generate regular expressions, causing exponential resource consumption.\n\nThe Red Hat Advanced Cluster Security is not affected by this issue since it\u0027s shipping a `path-to-regexp` version which doesn\u0027t contain the vulnerable code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4926"
},
{
"category": "external",
"summary": "RHBZ#2451867",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451867"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4926"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
}
],
"release_date": "2026-03-26T18:59:38+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, limit the use of multiple sequential optional groups in route patterns within applications that use `path-to-regexp`. Additionally, avoid directly passing user-controlled input as route patterns to prevent the generation of maliciously crafted regular expressions.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "path-to-regexp: path-to-regexp: Denial of Service via crafted regular expressions"
},
{
"cve": "CVE-2026-22731",
"cwe": {
"id": "CWE-305",
"name": "Authentication Bypass by Primary Weakness"
},
"discovery_date": "2026-03-19T23:02:37.111109+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449290"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Spring Boot. This vulnerability, an authentication bypass, occurs when an application endpoint requiring authentication is declared under a specific path already configured for a Health Group additional path. A remote attacker could exploit this to bypass authentication, potentially gaining unauthorized access to sensitive application endpoints. This could lead to information disclosure or unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Spring Boot: Spring Boot: Authentication bypass via misconfigured Health Group additional path",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-22731"
},
{
"category": "external",
"summary": "RHBZ#2449290",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449290"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-22731",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22731"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22731",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22731"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-22731",
"url": "https://spring.io/security/cve-2026-22731"
}
],
"release_date": "2026-03-19T22:36:15.112000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate, ensure that application endpoints requiring authentication are not declared under paths already configured as Health Group additional paths within Spring Boot applications using Actuator. Review and adjust your application\u0027s configuration to prevent this overlap. A redeployment of the application is required for changes to take effect.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Spring Boot: Spring Boot: Authentication bypass via misconfigured Health Group additional path"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-26999",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-03-05T19:01:09.939098+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2444874"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote unauthenticated client can exploit this vulnerability by sending an incomplete Transport Layer Security (TLS) record, which causes the TLS handshake to stall indefinitely. This can lead to resource exhaustion, such as file descriptors and goroutines, ultimately degrading the availability of all services on the affected entrypoint, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik: Traefik: Denial of Service due to incomplete TLS handshake",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26999"
},
{
"category": "external",
"summary": "RHBZ#2444874",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444874"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26999"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26999",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26999"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v2.11.38",
"url": "https://github.com/traefik/traefik/releases/tag/v2.11.38"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.9",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.9"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-xw98-5q62-jx94",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-xw98-5q62-jx94"
}
],
"release_date": "2026-03-05T16:15:36.437000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik: Traefik: Denial of Service due to incomplete TLS handshake"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27606",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-02-25T04:01:24.449922+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2442530"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Rollup, a JavaScript module bundler. Insecure file name sanitization in the core engine allows an attacker to control output filenames, potentially through command-line interface (CLI) inputs, manual chunk aliases, or malicious plugins. By using directory traversal sequences (`../`), an attacker can overwrite files anywhere on the host filesystem where the build process has write permissions. This vulnerability can lead to persistent remote code execution (RCE) by overwriting critical system or user configuration files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rollup: Rollup: Remote Code Execution via Path Traversal Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27606"
},
{
"category": "external",
"summary": "RHBZ#2442530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2442530"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27606",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27606"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27606",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27606"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2",
"url": "https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e",
"url": "https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3",
"url": "https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/releases/tag/v2.80.0",
"url": "https://github.com/rollup/rollup/releases/tag/v2.80.0"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/releases/tag/v3.30.0",
"url": "https://github.com/rollup/rollup/releases/tag/v3.30.0"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/releases/tag/v4.59.0",
"url": "https://github.com/rollup/rollup/releases/tag/v4.59.0"
},
{
"category": "external",
"summary": "https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc",
"url": "https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc"
}
],
"release_date": "2026-02-25T02:08:06.682000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rollup: Rollup: Remote Code Execution via Path Traversal Vulnerability"
},
{
"cve": "CVE-2026-29054",
"cwe": {
"id": "CWE-178",
"name": "Improper Handling of Case Sensitivity"
},
"discovery_date": "2026-03-05T19:01:04.119334+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2444872"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote unauthenticated client can exploit a case sensitivity vulnerability in how Traefik processes HTTP/1.1 requests. By using lowercase tokens in the Connection header, an attacker can bypass security protections, leading to the removal of Traefik-managed forwarded identity headers. This could result in information disclosure or misattribution of client requests.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik: Traefik: Information disclosure due to case-insensitive Connection header processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29054"
},
{
"category": "external",
"summary": "RHBZ#2444872",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444872"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29054",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29054"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29054",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29054"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v2.11.38",
"url": "https://github.com/traefik/traefik/releases/tag/v2.11.38"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.9",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.9"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-92mv-8f8w-wq52",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-92mv-8f8w-wq52"
}
],
"release_date": "2026-03-05T16:18:49.230000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik: Traefik: Information disclosure due to case-insensitive Connection header processing"
},
{
"cve": "CVE-2026-32305",
"cwe": {
"id": "CWE-179",
"name": "Incorrect Behavior Order: Early Validation"
},
"discovery_date": "2026-03-20T11:02:42.394091+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449595"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. A remote attacker can exploit this vulnerability by sending fragmented ClientHello packets during the Transport Layer Security (TLS) handshake. This causes Traefik\u0027s Server Name Indication (SNI) extraction to fail, leading to a fallback to a default TLS configuration that does not require client certificates. This allows an attacker to bypass mutual TLS (mTLS) authentication, gaining unauthorized access to services that should be protected by client certificate requirements.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Traefik: github.com/traefik/traefik: Traefik: mTLS bypass allows unauthorized service access via fragmented ClientHello.",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32305"
},
{
"category": "external",
"summary": "RHBZ#2449595",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449595"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32305",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32305"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32305",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32305"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v2.11.41",
"url": "https://github.com/traefik/traefik/releases/tag/v2.11.41"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.11",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.11"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2",
"url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-wvvq-wgcr-9q48"
}
],
"release_date": "2026-03-20T10:01:13.620000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate unauthorized access, restrict network access to the Traefik instance to only trusted clients and networks. Implement firewall rules to limit inbound connections to the ports Traefik listens on for mTLS-protected services. For example, using `firewalld`, specific source IP addresses or networks can be allowed. After applying firewall rules, ensure the firewall service is reloaded for changes to take effect. This reduces the attack surface by preventing untrusted external access to the Traefik instance.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Traefik: github.com/traefik/traefik: Traefik: mTLS bypass allows unauthorized service access via fragmented ClientHello."
},
{
"cve": "CVE-2026-32695",
"cwe": {
"id": "CWE-917",
"name": "Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
},
"discovery_date": "2026-03-27T14:01:07.317898+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452235"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When using the Knative provider, Traefik incorrectly interpolates user-controlled values into router rule expressions without proper escaping. This vulnerability allows an attacker to inject malicious rule syntax, leading to a host restriction bypass. In multi-tenant environments, this can result in unauthorized traffic being routed to victim services, potentially exposing cross-tenant traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik: Traefik: Cross-tenant traffic exposure and host restriction bypass via rule-syntax injection in Knative provider",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32695"
},
{
"category": "external",
"summary": "RHBZ#2452235",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452235"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32695",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32695"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32695",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32695"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.11",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.11"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2",
"url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.2"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-67jx-r9pv-98rj",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-67jx-r9pv-98rj"
}
],
"release_date": "2026-03-27T13:47:03.645000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik: Traefik: Cross-tenant traffic exposure and host restriction bypass via rule-syntax injection in Knative provider"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33433",
"cwe": {
"id": "CWE-290",
"name": "Authentication Bypass by Spoofing"
},
"discovery_date": "2026-03-27T15:03:19.672851+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452289"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Traefik, an HTTP reverse proxy and load balancer. When the `headerField` is configured with a non-canonical HTTP header name, an authenticated attacker can inject a canonical version of that header. This allows the attacker to impersonate any identity to the backend, leading to an authentication bypass. The backend prioritizes the attacker-injected header, overriding Traefik\u0027s intended header.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/traefik/traefik: Traefik: Authentication bypass via non-canonical HTTP header injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33433"
},
{
"category": "external",
"summary": "RHBZ#2452289",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452289"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33433",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33433"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33433",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33433"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v2.11.42",
"url": "https://github.com/traefik/traefik/releases/tag/v2.11.42"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.6.11",
"url": "https://github.com/traefik/traefik/releases/tag/v3.6.11"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3",
"url": "https://github.com/traefik/traefik/releases/tag/v3.7.0-ea.3"
},
{
"category": "external",
"summary": "https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c",
"url": "https://github.com/traefik/traefik/security/advisories/GHSA-qr99-7898-vr7c"
}
],
"release_date": "2026-03-27T13:49:08.455000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/traefik/traefik: Traefik: Authentication bypass via non-canonical HTTP header injection"
},
{
"cve": "CVE-2026-33805",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-04-15T11:00:57.611466+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458651"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in @fastify/reply-from and @fastify/http-proxy. A remote attacker can exploit this vulnerability by manipulating the Connection header in client requests. This allows the attacker to remove specific headers that the proxy has added for security, routing, or access control purposes. Consequently, an attacker could bypass security mechanisms or gain unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@fastify/reply-from: @fastify/http-proxy: Fastify Reply From and HTTP Proxy: Security bypass via Connection header manipulation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important flaw exists in @fastify/reply-from and @fastify/http-proxy, allowing a remote attacker to bypass security, routing, or access control mechanisms. This is achieved by manipulating the Connection header in client requests, which can remove critical proxy-added headers. If reply-from or http-proxy are being used to add security relevant headers the attacker may be able to remove such information resulting in authentication bypass, privilege escalations or the possibility of jeopardize any further security control which depends on the removed request headers. This vulnerability have a high attack complexity rate as the attacker needs to intercept the communication between the client and the server to be able to manipulate the headers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33805"
},
{
"category": "external",
"summary": "RHBZ#2458651",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458651"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33805",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33805"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33805",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33805"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-gwhp-pf74-vj37",
"url": "https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-gwhp-pf74-vj37"
}
],
"release_date": "2026-04-15T10:13:25.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@fastify/reply-from: @fastify/http-proxy: Fastify Reply From and HTTP Proxy: Security bypass via Connection header manipulation"
},
{
"cve": "CVE-2026-33870",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-03-27T21:01:59.865839+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452453"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/1.1 chunked transfer encoding extension values. Due to incorrect parsing of quoted strings, this flaw enables request smuggling attacks, potentially allowing an attacker to bypass security controls or access unauthorized information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33870"
},
{
"category": "external",
"summary": "RHBZ#2452453",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452453"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33870"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33870",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33870"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8",
"url": "https://github.com/netty/netty/security/advisories/GHSA-pwqr-wmgm-9rr8"
},
{
"category": "external",
"summary": "https://w4ke.info/2025/06/18/funky-chunks.html",
"url": "https://w4ke.info/2025/06/18/funky-chunks.html"
},
{
"category": "external",
"summary": "https://w4ke.info/2025/10/29/funky-chunks-2.html",
"url": "https://w4ke.info/2025/10/29/funky-chunks-2.html"
},
{
"category": "external",
"summary": "https://www.rfc-editor.org/rfc/rfc9110",
"url": "https://www.rfc-editor.org/rfc/rfc9110"
}
],
"release_date": "2026-03-27T19:54:15.586000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values"
},
{
"cve": "CVE-2026-33871",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-27T21:02:13.396015+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452456"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty. A remote user can trigger a Denial of Service (DoS) against a Netty HTTP/2 server by sending a flood of CONTINUATION frames. The server\u0027s lack of a limit on these frames, coupled with a bypass of size-based mitigations using zero-byte frames, allows an attacker to consume excessive CPU resources. This can render the server unresponsive with minimal bandwidth usage.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This important vulnerability in Netty HTTP/2 servers allows a remote attacker to cause a Denial of Service by sending a flood of CONTINUATION frames. This can lead to excessive CPU consumption and render the server unresponsive. Red Hat products utilizing affected Netty versions, such as Red Hat AMQ, Enterprise Application Platform, and OpenShift Container Platform components, are impacted if configured to use HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33871"
},
{
"category": "external",
"summary": "RHBZ#2452456",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452456"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33871"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33871",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33871"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-w9fj-cfpg-grvv"
}
],
"release_date": "2026-03-27T19:55:23.135000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood"
},
{
"cve": "CVE-2026-33937",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:50.619819+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452523"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. An attacker can exploit this by supplying a crafted Abstract Syntax Tree (AST) object to the `Handlebars.compile()` function. This allows the injection and execution of arbitrary JavaScript code due to improper sanitization of the `value` field in `NumberLiteral` AST nodes. This vulnerability can lead to Remote Code Execution (RCE) on the server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Handlebars that allows for Remote Code Execution. The flaw occurs when the `Handlebars.compile()` function processes a specially crafted Abstract Syntax Tree (AST) object, leading to the injection and execution of arbitrary JavaScript code. Red Hat products utilizing Handlebars are affected if they process untrusted input through the `compile()` function.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33937"
},
{
"category": "external",
"summary": "RHBZ#2452523",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452523"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33937",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33937"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33937",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33937"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-2w6w-674q-4c4q"
}
],
"release_date": "2026-03-27T21:03:46.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that any input provided to the `Handlebars.compile()` function is strictly validated to be a string type, preventing the injection of crafted Abstract Syntax Tree (AST) objects. Additionally, for deployments where templates are pre-compiled at build time, consider utilizing the Handlebars runtime-only build (`handlebars/runtime`). This build variant does not include the `compile()` function, thereby eliminating the attack vector. If the application is a service, a restart may be required for the changes to take effect.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars: Remote Code Execution via crafted Abstract Syntax Tree object in compile()"
},
{
"cve": "CVE-2026-33938",
"cwe": {
"id": "CWE-917",
"name": "Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:58.504001+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452525"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. A remote attacker can exploit this vulnerability by manipulating the `@partial-block` special variable within the template data context. By overwriting `@partial-block` with a specially crafted Abstract Syntax Tree (AST) through a helper, a subsequent invocation of `{{\u003e @partial-block}}` will compile and execute the malicious AST. This enables arbitrary JavaScript execution on the server, leading to potential compromise of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in Handlebars allows arbitrary code execution when processing untrusted input. This occurs if an attacker can manipulate the `@partial-block` special variable through a helper, leading to the execution of a crafted Abstract Syntax Tree. Red Hat products are affected if they use Handlebars versions 4.0.0 through 4.7.8 in server-side applications where untrusted input can influence template data or context objects. Deployments utilizing the Handlebars runtime-only build are not vulnerable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33938"
},
{
"category": "external",
"summary": "RHBZ#2452525",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452525"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33938"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33938",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33938"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-3mfm-83xf-c92r"
}
],
"release_date": "2026-03-27T21:05:42.485000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Applications using Handlebars should implement the runtime-only build (`require(\u0027handlebars/runtime\u0027)`) to prevent exploitation, as this build lacks the vulnerable `compile()` method. Additionally, review all registered helpers to ensure they do not write arbitrary values to context objects, and avoid using third-party helpers in contexts exposed to untrusted input.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars: Handlebars: Arbitrary code execution via @partial-block overwrite"
},
{
"cve": "CVE-2026-33939",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-03-27T22:01:36.296267+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452508"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars.js. A remote attacker can exploit this by submitting a malformed Handlebars template that includes decorator syntax referencing an unregistered decorator. When the application attempts to compile this template without proper error handling, it triggers an unhandled `TypeError`. This error causes the Node.js process to crash, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars.js: Denial of Service via malformed decorator syntax in template compilation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in Handlebars.js affecting applications that compile user-supplied templates without proper error handling. A remote attacker can submit a malformed template containing unregistered decorator syntax, leading to an unhandled `TypeError` and crashing the Node.js process. Red Hat products are vulnerable if they use Handlebars.js in a configuration that allows untrusted input to be compiled at runtime without implementing `try/catch` blocks or input validation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33939"
},
{
"category": "external",
"summary": "RHBZ#2452508",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452508"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33939",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33939"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33939",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33939"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-9cx6-37pm-9jff"
}
],
"release_date": "2026-03-27T21:08:24.664000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications utilizing Handlebars.js should implement robust error handling during template compilation and rendering. Specifically, wrap template compilation and rendering calls in `try/catch` blocks to gracefully handle `TypeError` exceptions. Alternatively, validate user-supplied template input to reject decorator syntax (`{{*...}}`) if decorators are not actively used by the application. Employing a pre-compilation workflow, where templates are compiled at build time and only pre-compiled templates are served, can also prevent runtime exploitation. If the application is a service, a restart may be required for changes to take effect.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars.js: Denial of Service via malformed decorator syntax in template compilation"
},
{
"cve": "CVE-2026-33940",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:42.813017+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452521"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars.js. A remote attacker can exploit this vulnerability by providing a specially crafted object within the template context. This crafted object, when processed by a dynamic partial lookup, can bypass security checks and be interpreted as malicious code. This allows the attacker to execute arbitrary commands on the server where Handlebars.js is running.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars.js: Arbitrary code execution via crafted template context",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important arbitrary code execution vulnerability in Handlebars.js. The flaw can be exploited when an application uses Handlebars.js with dynamic partial lookups and processes user-controlled data within the template context. Red Hat products bundling Handlebars.js are affected if they meet these specific conditions for exploitation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33940"
},
{
"category": "external",
"summary": "RHBZ#2452521",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452521"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33940"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33940",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33940"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xhpv-hc6g-r9c6"
}
],
"release_date": "2026-03-27T21:11:10.719000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this issue, use the runtime-only build of Handlebars.js, which prevents the fallback compilation path from being reached. Alternatively, sanitize all context data before rendering to ensure no non-primitive objects are passed to dynamic partials. Avoid dynamic partial lookups (`{{\u003e (lookup ...)}}`) when context data is user-controlled. Implementing these mitigations may require application-level changes.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars.js: Arbitrary code execution via crafted template context"
},
{
"cve": "CVE-2026-33941",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-27T22:02:54.583022+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452524"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Handlebars. The Handlebars command-line interface (CLI) precompiler concatenates user-controlled strings, such as template file names and CLI options, directly into the generated JavaScript without proper escaping or sanitization. An attacker capable of influencing these inputs can inject arbitrary JavaScript code. This can lead to arbitrary code execution when the generated JavaScript bundle is loaded in a Node.js environment or a web browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "handlebars.js: Handlebars: Arbitrary code execution via CLI precompiler input sanitization flaw",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in Handlebars allows arbitrary code execution when the CLI precompiler processes untrusted inputs. An attacker who can influence template filenames or command-line arguments can inject malicious JavaScript, which executes when the generated bundle is loaded. Red Hat products utilizing the Handlebars CLI precompiler in environments where untrusted inputs are processed may be affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33941"
},
{
"category": "external",
"summary": "RHBZ#2452524",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452524"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33941",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33941"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33941",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33941"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2",
"url": "https://github.com/handlebars-lang/handlebars.js/commit/68d8df5a88e0a26fe9e6084c5c6aaebe67b07da2"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9",
"url": "https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.9"
},
{
"category": "external",
"summary": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf",
"url": "https://github.com/handlebars-lang/handlebars.js/security/advisories/GHSA-xjpj-3mr7-gcpf"
}
],
"release_date": "2026-03-27T21:13:15.437000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure all inputs to the Handlebars CLI precompiler are thoroughly validated, rejecting characters with JavaScript string-escaping significance (e.g., \\\" , \\\u0027 , ;). For automated build pipelines, configure a fixed and trusted namespace string via a configuration file rather than passing it through command-line arguments. Additionally, consider running the precompiler within a sandboxed environment, such as a container with restricted write access, to limit the potential impact of successful exploitation.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "handlebars.js: Handlebars: Arbitrary code execution via CLI precompiler input sanitization flaw"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-40175",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-10T20:02:10.296601+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific \"Gadget\" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Remote Code Execution via Prototype Pollution escalation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific \"Gadget\" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.\n \nWith pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.\n\nRed Hat products that incorporate the vulnerable Axios library are affected.\n\nThe openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it\u0027s not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.\n\nRegarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40175"
},
{
"category": "external",
"summary": "RHBZ#2457432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40175"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1",
"url": "https://github.com/axios/axios/commit/363185461b90b1b78845dc8a99a1f103d9b122a1"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10660",
"url": "https://github.com/axios/axios/pull/10660"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx",
"url": "https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx"
}
],
"release_date": "2026-04-10T19:23:52.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-23T14:43:48+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to:\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:10175"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:56cb90d67267ebd08bdfda825c0a00c7ffea666ceab68f50892420c04c393cfd_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:6ced7da0ea3bd692379aff9f94c54c7593841a15913ac499de3af20b092db729_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:ab17ccae17238a74cafd6fdd33263f5c882ae15cbc81dfb02723694a7c360ce1_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-rhel9@sha256:baccc8bb116ef4d28dab809f404bdf5e45c2e55322ba1460da358c514f5cf2a5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:215497f67b822c565fa6768950a94ba03379d772f67ad17e27721094c4d10ffa_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:45b9dab6a3009aeb058509314d216b8a100962d8a191ad0e10b317652425dcfc_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:70cca9c1fe458d00f4cf7735ed87b070d12060110d93abf0dbd85150e89a2d66_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/code-sshd-rhel9@sha256:f7d3433f5dcaca8469c987c43cdd6e61477f0197088f9fff043d36dd5e81b89f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:24a3b1ec2d7d0550c64845b92f19b2edfadb27dcebbe1c97f18b99304f872b4e_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:59c9346bf39f7ccda10b4859c7e97d618f0e8304fb4b00cc43f89889784f2dde_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:977f8f7267f8d125ceceb83842ab4a694a7f9f9b128fd18cd95a563268d00ea1_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/configbump-rhel9@sha256:cb03babff3a4a782254c6ccf6552e92c8569f79492cc181fc99e6912c1feb6e9_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:13738c2b11bdbfe22d91bb0621a501c0c1ab87b9b386d42b7ae113ffd8d323ff_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:25dbcc4a7decb9c274715c585d61a6caf3baa5d48258377ac364eae20a51d2c6_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:339aa11adcbee1feadc4d56961f5dabd61790c92914ea11161a6573bdef8822e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/dashboard-rhel9@sha256:633f8dde6d1247cbccacac6cd7b96c6072c8324d80f0975bcd758fb8a3a30615_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-operator-bundle@sha256:961edfa27ff733d7579fa404afc736fbf2a06b9925afa21117cce72df5fae379_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:1b352d90ac53831bc57791941f2599aeaed1ae8ed20f9d3741bc6437280dd6a2_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:b725dd7c6820096309e8ae1bdce5c04c273dba3087a45f077c332bb255e58a17_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:d05c45444879964a4967b859bf350cb0af320636b752b87aed2e89439ecb20c6_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/devspaces-rhel9-operator@sha256:dcb526cfbfab7edfdad8f75e572f3ce9a2620599efb1b47a306bb9e39eb9ae0d_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:3bc28b9aad6ba4d8c9d29b909aa7031ec610f9faec927111434d7d93dacc511e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:6b3e4729274a6d9b8056c806cbd85d8cc5009df5212d506a09f7d5520bb61dac_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:926b1e278e1e4f5e3ac9bb48b363b52fb4828b63d652e75feffa25a5c4803843_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/imagepuller-rhel9@sha256:d3dcc6ef11235469669ea0398824060cda322cfc2dc2f36a481e6de8d41b926f_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:4008a58bf876fe38017bfad1b7cbb5510d5e919600d1b59d439b8faadc336932_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:7e061e4d402706fbad01d755aee25b636e05d47ddf6badd28b6ed799122262fd_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:de2b07f33ed8acdee2c312c08961a71629477329b9212edf8f95a00ab46f0418_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/jetbrains-ide-rhel9@sha256:f72fca1d67a2faefbbe4725614be7d10df4b91b18d34e744d71a97f27376dce5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:1d3a53c6688db4d8f8ff853003c96de2fb4d88c6274c2b32d3002eefb64d48d8_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:4065b1d8a2e685fe4e0710dc55670ec7f5b189d09331f036e3cbf69929b2d38d_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:5df884a70037f56dc852b4f4ec8a6e49ddea327c5c744d5bf21b3dcf0634bc45_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/multicluster-redirector-rhel9@sha256:7933cd708f57493d33d32620fa888856b714c343572cf5e84fa80b3bdb1e990a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:12650f16ec1d9a079736da2d7e7428c791ae9a105bc0237814b9a2edd9f9a0ae_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:b2ccfa151d86315f1973d9cbfb1d3564e9daea8e4eac04e6f7b9e06f4521fcde_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:bf8c28c1dbed78077a84baf2d43bb0119c37a088a480121395aefcceb89b066e_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/openvsx-rhel9@sha256:d0882e222cea223cd64110ecfdf6dfdbe4faa7526c31293d304367bf9bb6f16c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:27e30c7cede8d846cac4c623e84c6791a64b918136c5b781e9e885139fe237fb_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e224aebfad7c18649dfba4361bc0a77e937da1e69c230efa25ea2f6e1f9b17c2_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:e832fb5a60f8a5180462458de7f410d01d8423473c4501b1b2e64ee606cb19b5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/pluginregistry-rhel9@sha256:fb7eb298c502721c2dc77cf25d073681b9e5a4d6a7f5b1107f70bb8f787d273d_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:57b73c1ca124517557ba4b054c6367f0c045f588ec03a41e97184907562ca4e4_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:7ba3f74dd8f72ea794da3073340c12377551aa77094c5c48ba2011e8fb8170dc_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:88bedfc47deb5194aa15c18880111e810768428621168877a6316d394e1d8297_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/server-rhel9@sha256:d97641f5881f1210f5ec6a95129cd99f232d24ee3e9eee2b3ad74a9eecf429ca_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:179efd9379165b0e7992d0cca5e2c94cb25412153ea333e4c01d693bf64ad736_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:34f8243809fb492094eb221362addaa91ab8d2dd9f233383328b695bc1f559c4_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:cbf71be94cfa5f2eaee079395261f3130b8857f38f210f5732280d30a792492c_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/traefik-rhel9@sha256:ee3f68c28619e2af980739a351305c843d0ebb8bc98bda61e77cfabbb2e11641_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:02d89848ea471688663827250f824a48af4e29bf7c0cd4713182f234df48826a_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:8e1683ff5b33202e909ab53a9adc5b86997d25d33f8e1063083914e5189540f1_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e1dbd1f05eda40b0a87e7ea1d9f0ca59dde6a51981c0b9efba5f2e5512b323e5_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel10@sha256:e6a901d3572a786dcee22b4d7a80547cbfe8cb2dba212e2f9e76a1bc897caa9c_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:08f1525029ca83ecc0c44129d6dc5902af62043b5ef3779f8d91d6b603427aa3_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:17a4a50ceb0a87dfab7ae88d04f0dca528af15b15c45b04f44e631a6ffdab420_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:9d1263ca381ca4a9e320baf7694c530ddbf21685b9cdefc6717e833c9876d26e_s390x",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-base-rhel9@sha256:b65e3d437cb6f5a9c14b94f0f8e1b19260e740a9bdaa2655a1641c8dd4bb67e5_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:0c7e182dc31c12b24b589224202b3231e400367dda68fa5b670a60219d1ee0ae_amd64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:44aa34d856b0d25407327ba3c0a29f45543976a4500093a589998dc846a6c88f_arm64",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:6bea432af6f2d9217fd722326d5c5ca00d205d98f386bd1d23aa1abadda7814c_ppc64le",
"Red Hat OpenShift Dev Spaces 3.27:registry.redhat.io/devspaces/udi-rhel9@sha256:7c510843d926a2de666d22edf9edbefaa0025d5e2a002c6519d79fa820a1faa1_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Remote Code Execution via Prototype Pollution escalation"
}
]
}
RHSA-2026:11070
Vulnerability from csaf_redhat - Published: 2026-04-27 20:25 - Updated: 2026-07-23 09:53Summary
Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.
Details: See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64 | — |
Threats
Impact
Important
A flaw was found in the DataRow.Decode function within the github.com/jackc/pgproto3/v2 component. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message containing a negative field length. This improper validation of field lengths leads to a "slice bounds out of range panic", resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
8.3 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64 | — |
Workaround
|
Threats
Impact
Important
References
51 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
"title": "Topic"
},
{
"category": "general",
"text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:11070",
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32286",
"url": "https://access.redhat.com/security/cve/CVE-2026-32286"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33815",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.8/html-single/release_notes/index#about-this-release-4811_release-notes-48",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.8/html-single/release_notes/index#about-this-release-4811_release-notes-48"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11070.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update",
"tracking": {
"current_release_date": "2026-07-23T09:53:24+00:00",
"generator": {
"date": "2026-07-23T09:53:24+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:11070",
"initial_release_date": "2026-04-27T20:25:56+00:00",
"revision_history": [
{
"date": "2026-04-27T20:25:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-23T09:53:24+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Security 4.8",
"product": {
"name": "Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Af41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Ab950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776418904"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Adbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256%3Ac2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Af1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Aac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Aab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Acfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776418904"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Abf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Ab5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Adaf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3Af6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3Ac35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Ae8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776418904"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Ae4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776418904"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Aeafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Abb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Ad639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Ad88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T20:25:56+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32286",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-03-26T20:01:59.226117+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451847"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the DataRow.Decode function within the github.com/jackc/pgproto3/v2 component. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message containing a negative field length. This improper validation of field lengths leads to a \"slice bounds out of range panic\", resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The PostgreSQL server multicluster-globalhub-manager connects to is either provisioned by the operator itself or specified by the admin managing the deployment. To successfully exploit the vulnerability in this context the attacker would need to compromise the operator-deployed PostgreSQL server to force a crafted malicious DataRow message or they would need to have the privileges required to modify the operator-provisioned deployment or configure globalhub-manager to use a compromised/malicious \u201cBYO Postgres\u201d server.\n\nThe first scenario (compromising a legitimate PostgreSQL server) would change Attack Complexity from Low to High resulting in an adjusted CVSS v3.1 score of 5.9 (Moderate)\nThe other scenarios (manipulating the operator provisioned-deployment or configuring the globalhub-manager to use a malicious server) would maintain AC:L but would require privileged access. This would change Privileges Required from None to High resulting in an adjusted CVSS v3.1 score of 4.9 (Moderate)\n\nBased on the above the Impact Rating for multicluster-globalhub-manager-rhel9 is Moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32286"
},
{
"category": "external",
"summary": "RHBZ#2451847",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451847"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32286"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4518",
"url": "https://github.com/golang/vulndb/issues/4518"
},
{
"category": "external",
"summary": "https://github.com/jackc/pgx/issues/2507",
"url": "https://github.com/jackc/pgx/issues/2507"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4518",
"url": "https://pkg.go.dev/vuln/GO-2026-4518"
}
],
"release_date": "2026-03-26T19:40:51.974000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T20:25:56+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T20:25:56+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:25.130006+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "RHBZ#2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4771",
"url": "https://pkg.go.dev/vuln/GO-2026-4771"
}
],
"release_date": "2026-04-07T15:19:24.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T20:25:56+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T20:25:56+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T20:25:56+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T20:25:56+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11070"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:7a51bab1a606cd7472ae715d80d1cc2a3b9c86869644354d4b4be83f9a320392_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e4ca37e827701d9602ce7816f39911b0808df9d2673c96731385d76f59808046_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:e8924e76615b9c5d4c04a69ad4f7f2e529383df89e1fe285077b6f4055a1f429_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:f41ad57372406f83d689f7be8edf05088c32c3c98bb349d0da1658433030c465_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:190480aab6dcffb2c38cb6476f7ee1f153deeb88d9084f6fe40d1e9b23c372f5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:bf4636b3a9d9b0923f4c593f3fd475d81bee15e768561375b62c198dbe018655_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:dbe8d3be4da19c7da99bc8d207cb9b2abf65287746d53afa5abfad84871dfed1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:eafe2ea60b4ee8812051759389eece3a2c162b83783daf3806f0945666c9e698_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:c2fb8cbfcb4398c8bcfc6fab634217c3b0f6d33ecb8247b31ab77647f5590a4c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:1355a9c838c47a45c9960a89c6e3df85be67b57f664174fdb922f25e5a4343e1_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:3bbc3c4278796a92f26478c29c2033c3ba6946db18cb3e193ceafc70e767a260_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4964c491550d58f9fb7467e659805c9a51b06a20815d25e20b20524b2ac758d1_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:4d728922091dff892202980f8068e66be31dde114535efcab70990e452ff31f4_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:0085ef40238991f5845e814b8af029bae0f86df2b1267db1fc7b183e153261f6_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:134b59523553994370da4c6150b93b468c79b1ee3d7d465537cc377236b8e709_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5db206a3db9db541be25b7694c68b3e7d8d2bb17ec9f6004c34ecc270aec0635_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:7327f147b034bdc20c2edab166ae3907862a84c5e2ee77fdc1d97a031c0d5956_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:301076ae814c3a25c0d21bb3dadc8e4cd1389240f29516a391fbdee3bc6bbf2d_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5b6b1312c3bc3584bccf21f193349b5fa42c569cb09a9a2c4c486c195397d520_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:5f2ae822b677e41b413b2f597a14ef9b32c36ac25952cc6331aa9a0ff1d55f6c_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:8510ad2a751af9c1af29b7a4bfdd0c361e413de06d60615ebce658d8d4aab941_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2719a3e55cd5e055500e752bdac602e93c1e02e46e7c52d7c3c0b2c80bd66f2b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:2e5be565bbd32f08ab97c20a7eb82dbd2a41edbb484db394efee0307110ace8d_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:c35672d560e24548ca015802c76b626e205e16fda6a4f0fc4957b1092f11bedd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:cfbd0351460f7fcfaa3100e21a7e099ec66bb5a4bae3a24289cff3e95c882bae_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
}
]
}
RHSA-2026:11217
Vulnerability from csaf_redhat - Published: 2026-04-27 23:24 - Updated: 2026-07-23 09:53Summary
Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Advanced Cluster Security
(RHACS), which typically include new features, bug fixes, and/or
security patches.
Details: See the release notes (link in the references section) for a
description of the fixes and enhancements in this particular release.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64 | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le | — |
Threats
Impact
Important
A flaw was found in the DataRow.Decode function within the github.com/jackc/pgproto3/v2 component. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message containing a negative field length. This improper validation of field lengths leads to a "slice bounds out of range panic", resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.
8.3 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.
8.3 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
60 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Advanced Cluster Security\n(RHACS), which typically include new features, bug fixes, and/or\nsecurity patches.",
"title": "Topic"
},
{
"category": "general",
"text": "See the release notes (link in the references section) for a\ndescription of the fixes and enhancements in this particular release.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:11217",
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32286",
"url": "https://access.redhat.com/security/cve/CVE-2026-32286"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33815",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33816",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.8/html-single/release_notes/index#about-this-release-4811_release-notes-48",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_security_for_kubernetes/4.8/html-single/release_notes/index#about-this-release-4811_release-notes-48"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11217.json"
}
],
"title": "Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update",
"tracking": {
"current_release_date": "2026-07-23T09:53:25+00:00",
"generator": {
"date": "2026-07-23T09:53:25+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:11217",
"initial_release_date": "2026-04-27T23:24:47+00:00",
"revision_history": [
{
"date": "2026-04-27T23:24:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-23T09:53:25+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Security 4.8",
"product": {
"name": "Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:advanced_cluster_security:4.8::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Security"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3Ab950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776418904"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3Abdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-operator-bundle@sha256%3A0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Af1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Aac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Aab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3Ac6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e?arch=amd64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Aedc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776418904"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Ab4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3A3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Ab5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Adaf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3Af6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b?arch=arm64\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3Aaa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776418904"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3A5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Ac5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3A030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3A7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3A0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b?arch=ppc64le\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-central-db-rhel8@sha256%3A5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-collector-rhel8@sha256%3A75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776418904"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-main-rhel8@sha256%3Aa8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-rhel8-operator@sha256%3A24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-roxctl-rhel8@sha256%3Ad769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-rhel8@sha256%3Abb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-rhel8@sha256%3Ad639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-db-slim-rhel8@sha256%3Ad88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-slim-rhel8@sha256%3A9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1776727747"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-rhel8@sha256%3A8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"product": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"product_id": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rhacs-scanner-v4-db-rhel8@sha256%3A135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55?arch=s390x\u0026repository_url=registry.redhat.io/advanced-cluster-security\u0026tag=1777307791"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64 as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le as a component of Red Hat Advanced Cluster Security 4.8",
"product_id": "Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
},
"product_reference": "registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Security 4.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T23:24:47+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T23:24:47+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-32286",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-03-26T20:01:59.226117+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451847"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the DataRow.Decode function within the github.com/jackc/pgproto3/v2 component. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message containing a negative field length. This improper validation of field lengths leads to a \"slice bounds out of range panic\", resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The PostgreSQL server multicluster-globalhub-manager connects to is either provisioned by the operator itself or specified by the admin managing the deployment. To successfully exploit the vulnerability in this context the attacker would need to compromise the operator-deployed PostgreSQL server to force a crafted malicious DataRow message or they would need to have the privileges required to modify the operator-provisioned deployment or configure globalhub-manager to use a compromised/malicious \u201cBYO Postgres\u201d server.\n\nThe first scenario (compromising a legitimate PostgreSQL server) would change Attack Complexity from Low to High resulting in an adjusted CVSS v3.1 score of 5.9 (Moderate)\nThe other scenarios (manipulating the operator provisioned-deployment or configuring the globalhub-manager to use a malicious server) would maintain AC:L but would require privileged access. This would change Privileges Required from None to High resulting in an adjusted CVSS v3.1 score of 4.9 (Moderate)\n\nBased on the above the Impact Rating for multicluster-globalhub-manager-rhel9 is Moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32286"
},
{
"category": "external",
"summary": "RHBZ#2451847",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451847"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32286"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4518",
"url": "https://github.com/golang/vulndb/issues/4518"
},
{
"category": "external",
"summary": "https://github.com/jackc/pgx/issues/2507",
"url": "https://github.com/jackc/pgx/issues/2507"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4518",
"url": "https://pkg.go.dev/vuln/GO-2026-4518"
}
],
"release_date": "2026-03-26T19:40:51.974000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T23:24:47+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T23:24:47+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33815",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:25.130006+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455975"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx. This memory-safety vulnerability could potentially lead to unexpected behavior or system instability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33815"
},
{
"category": "external",
"summary": "RHBZ#2455975",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455975"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33815",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33815"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33815"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4771",
"url": "https://pkg.go.dev/vuln/GO-2026-4771"
}
],
"release_date": "2026-04-07T15:19:24.344000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T23:24:47+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-33816",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2026-04-07T16:01:14.142946+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455972"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service (DoS) or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation and specific consequences would depend on the nature of the memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33816"
},
{
"category": "external",
"summary": "RHBZ#2455972",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455972"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33816"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4772",
"url": "https://pkg.go.dev/vuln/GO-2026-4772"
}
],
"release_date": "2026-04-07T15:19:24.529000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T23:24:47+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T23:24:47+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-27T23:24:47+00:00",
"details": "If you are using an earlier version of RHACS, you are advised to\nupgrade to the version of RHACS mentioned in the synopsis and release\nnotes in order to take advantage of the enhancements, bug fixes, and/or\nsecurity patches in the release.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:11217"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:5fab4694b598d616ca775835520c8d062940bec75a5bd820b2290134529b280b_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:677f693e3db20c1f56c9d51905fc45b7ea1efce12e3fc6cf90486f2c9f1d21b4_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:aa5d6eb26500ce81f59a43047d24e9a7eaea4e1d3ab4d428e05fb1298aef1b97_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8@sha256:edc41b3c96f9dd9bd96851d4d6cce65a23da484af08b48caba90570960a2e53a_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:4c594546133a2b8ffb3f142ea1e0d2353e47192f497931b6e81bc6e348f8b221_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:75b567224f0a92727d96d78609e8b896adf742c0bb2c4c29c7d2f6cf4f1c899a_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:8fb531d320ca0499582878bca05bbc0f1ed8a5211d219fc6705e398972010f7f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8@sha256:b950a88c68312126e9d448ccc4bca130733d8f8d54cc38ca1a697bb4199d5bbb_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:5804b537b255c13107f7ab6d48b445c4210f4274e19a011d37b3302b35a965e5_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:73f57091087f8e418c77f29624916bbf9f668c6ff172e4da93d3b1fea3234642_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:a8008b13ae24b0ccc4ab75e1642e2eb995e7d5e62e18acc5383b413fc6c06cb3_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8@sha256:b4a010d33119f95358539599665929e003dc366c73bbdbcf06d37f4e086c77c1_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle@sha256:0b617b6f12fe77636cbd3036d07b299165acb932edd407cc066987026c51bc2f_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:24732ee9e493c03e816d0ccc4874f9f27211a7de11fc8f345f0976c9e72d8210_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:91f791cb74011fb5e0832dfb50864d33439ab94deed91fe248430e63350617a6_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:9ef18af4c57b3f67065233e46129887d9b703fe65f39cecc83f41e3ba18542ce_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator@sha256:bdb808907802ae12515143661358af8e374bb635f48bc89d983b3f2cf5360d21_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:3290bf6033dffb72084afd9eb038f0268b76ea1112121e587da172d7cd432e68_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:958128da0821405d5dccc557c61336b9d19eb752eb54e667dbca3bc1ea97ec85_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:c5c8f2959b593149bfc654e5c212144c1640441d6512d91b0c0ed6a7b9474cbe_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8@sha256:d769ee8de44cc320ffcc68e76f43d63a381207362a9ef1e182912aaffa1a4dca_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:7f9e747c719f1afd49cda081cb4c3f3b7781a69a885c588e5ca1975d7fca7a75_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:ac3505103967758b81d8aaa7b026aee83a8fee477bf629c280d9e867ea229376_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:b5aacc4fb7668db525a499bbe7561910f0c563afb2503280745ec6a344063df3_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:d639affbc1ee9431f734d8ab9bde34bf7cd29be42d6fbb07060ba02849aa8722_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:0a93ca98cec909febd731a080362e5c371b8cdc1aa8772a632a012c2c915166f_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:ab6f139ae0d09334b2b5e499357b0fa14dae54c7a76560d5710ebb3d8fee5bbe_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:d88d142a7f919f6eff8f66c75fdffe3c0efb904273ece05488aad1153c89531f_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-db-slim-rhel8@sha256:daf11d42d49186f0b1dae8c4be0bb48c7009edbdc25bd84c54bbcad78a9a56ad_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:030180ba7545abfcb87c1e777889d1e23dc44e8e8fb1dbe1ab271ad9f5a4c5b9_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:15481465f2235fc95d36d057ea4dfdb15eee9357aa633627e6367c5adcd08536_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:bb23354b4fa307936ef344d6cc5fa070aaeddd41fb689a18074d2bfa3ac99fa4_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8@sha256:f1fe398f88b8a6ec2cf87b7d09442de5e5c20d84f6f4a2a3de5bd7f46d2894b7_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:134318dd1871cb7ba5227fcf76f5fd58c695f652ee2f7a21e9478231cd548046_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:5a36b4c601c1bdd63fda2d8ce091e9b1de3722a2b7d2b1c3a315fd0d4f722b8c_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:9b97a9b3b37059dfe3cb65ae8518b1c63723ae47b35bacc8b53a62992f50a900_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:f6cfa01a26be47fb5e8c7169aa33f18dbcdacb064c1cf425c322dfc4f1164305_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:08624e44eb42590abc4e4a745c3fbab9dc5688990f106137310bda05b76df69b_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:135321dc6a5cdb09491c3f2cbceb85580e375702a1c59cd0f0132e5d31a93e55_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:4686585e005415d888f1a4d9d9b51fc1dd52c91510be4e4797efc59a9777101b_ppc64le",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:c6eb2c7591ec559ccbe154b5fabedf0fe273251f7b47ab247a080f2a041da55e_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:02dbaad4b927c4238d24897704cdcc03467fc8ec2d59ee4b5417b7ac9f15f6f9_amd64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:6738e7b27b4caa6f1af635709ceb260269d7e82b5a3473d57bda18e8fffd25dd_arm64",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:8c646f72eee74416d1994de422e29bc76973ed3fdd9e0751769b739f402d55f7_s390x",
"Red Hat Advanced Cluster Security 4.8:registry.redhat.io/advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:96b78dce12edbb414d79979d6a396da934c6f019554597f4ded6c23535240629_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…